From jamescorsale at mac.com  Wed Mar  1 03:33:12 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Wed, 1 Mar 2006 05:33:12 -0500
Subject: [NPMUG] c/out photoshop
Message-ID: <8A153669-E702-4D85-8ADC-10A4887D0A1C@mac.com>

without photoshop and preferably an apple application (i have a  
limited primate brain after all) how can i edit the letters, like the  
color,
of this jpeg:
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Picture 2.png
Type: image/png
Size: 10561 bytes
Desc: not available
Url : http://davesevick.com/pipermail/npmug/attachments/20060301/fc25e84a/attachment.png 
-------------- next part --------------

?

Jim

Bob Casey: Because Pennsylvania Deserves Better
www.BobCaseyforPA.com


BATTLE, n.  The method of untying with the teeth a political knot  
that would not yield to the tongue.  -Ambrose Bierce, The Devil's  
Dictionary



From jamescorsale at mac.com  Wed Mar  1 04:03:22 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Wed, 1 Mar 2006 06:03:22 -0500
Subject: [NPMUG] Fwd:  c/out photoshop
References: <8A153669-E702-4D85-8ADC-10A4887D0A1C@mac.com>
Message-ID: <A45588A7-9825-471F-9184-8BBE2D84B0D8@mac.com>

the scrubbed image description: just black letters c/ white background
from a homemade business card.
Jim

Begin forwarded message:

> From: Jim Corsale <jamescorsale at mac.com>
> Date: March 1, 2006 5:33:12 AM EST
> To: Npmug at davesevick.com
> Subject: [NPMUG] c/out photoshop
>
> without photoshop and preferably an apple application (i have a
> limited primate brain after all) how can i edit the letters, like the
> color,
> of this jpeg:
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: Picture 2.png
> Type: image/png
> Size: 10561 bytes
> Desc: not available
> Url : http://davesevick.com/pipermail/npmug/attachments/20060301/ 
> fc25e84a/attachment.png
> -------------- next part --------------
>
> ?
>
> Jim
>
> Bob Casey: Because Pennsylvania Deserves Better
> www.BobCaseyforPA.com
>
>
> BATTLE, n.  The method of untying with the teeth a political knot
> that would not yield to the tongue.  -Ambrose Bierce, The Devil's
> Dictionary
>
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060301/1ef0f062/attachment.htm 

From victornado at mac.com  Wed Mar  1 05:11:17 2006
From: victornado at mac.com (Victoria Bush)
Date: Wed, 1 Mar 2006 07:11:17 -0500
Subject: [NPMUG] Fwd:  c/out photoshop
In-Reply-To: <A45588A7-9825-471F-9184-8BBE2D84B0D8@mac.com>
References: <8A153669-E702-4D85-8ADC-10A4887D0A1C@mac.com>
	<A45588A7-9825-471F-9184-8BBE2D84B0D8@mac.com>
Message-ID: <6975AB72-9CA7-4E44-ABD6-EDC1DAF41101@mac.com>

Just curious, what program did you use to home make this business card?

Vic

On Mar 1, 2006, at 6:03 AM, Jim Corsale wrote:

> the scrubbed image description: just black letters c/ white background
> from a homemade business card.
> Jim
>
> Begin forwarded message:
>
>> From: Jim Corsale <jamescorsale at mac.com>
>> Date: March 1, 2006 5:33:12 AM EST
>> To: Npmug at davesevick.com
>> Subject: [NPMUG] c/out photoshop
>>
>> without photoshop and preferably an apple application (i have a
>> limited primate brain after all) how can i edit the letters, like the
>> color,
>> of this jpeg:
>> -------------- next part --------------
>> A non-text attachment was scrubbed...
>> Name: Picture 2.png
>> Type: image/png
>> Size: 10561 bytes
>> Desc: not available
>> Url : http://davesevick.com/pipermail/npmug/attachments/20060301/
>> fc25e84a/attachment.png
>> -------------- next part --------------
>>
>> ?
>>
>> Jim
>>
>> Bob Casey: Because Pennsylvania Deserves Better
>> www.BobCaseyforPA.com
>>
>>
>> BATTLE, n.  The method of untying with the teeth a political knot
>> that would not yield to the tongue.  -Ambrose Bierce, The Devil's
>> Dictionary
>>
>>
>> _______________________________________________
>> NPMUG mailing list
>> NPMUG at davesevick.com
>> http://davesevick.com/mailman/listinfo/npmug
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: http://davesevick.com/pipermail/npmug/attachments/ 
> 20060301/1ef0f062/attachment.htm
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug


From dave at davesevick.com  Wed Mar  1 05:58:37 2006
From: dave at davesevick.com (Dave Sevick)
Date: Wed, 1 Mar 2006 07:58:37 -0500
Subject: [NPMUG] ((( a word on attachments to this listserve ))) Mailman
	"scrubbing" feature enabled
In-Reply-To: <8A153669-E702-4D85-8ADC-10A4887D0A1C@mac.com>
References: <8A153669-E702-4D85-8ADC-10A4887D0A1C@mac.com>
Message-ID: <890D8FDC-EF27-4EFB-90AE-979AD570A771@davesevick.com>

Jim,

Attachments are no longer accepted by the listserve to conserve space.

You can, however, link it to your website or other places where  
people can click to see your situation.

I can't house all the attchments on my server .... no can people  
download attachments.

This is a text only listserve.

So please use hyperlinks to point us to your issues and we'll all try  
to help you.

Dave Sevick

"Listserve very mean disciplinarian"


On Mar 1, 2006, at 5:33 AM, Jim Corsale wrote:

> without photoshop and preferably an apple application (i have a
> limited primate brain after all) how can i edit the letters, like the
> color,
> of this jpeg:
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: Picture 2.png
> Type: image/png
> Size: 10561 bytes
> Desc: not available
> Url : http://davesevick.com/pipermail/npmug/attachments/20060301/ 
> fc25e84a/attachment.png
> -------------- next part --------------
>
> ?
>
> Jim
>
> Bob Casey: Because Pennsylvania Deserves Better
> www.BobCaseyforPA.com
>
>
> BATTLE, n.  The method of untying with the teeth a political knot
> that would not yield to the tongue.  -Ambrose Bierce, The Devil's
> Dictionary
>
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From dave at davesevick.com  Wed Mar  1 05:59:24 2006
From: dave at davesevick.com (Dave Sevick)
Date: Wed, 1 Mar 2006 07:59:24 -0500
Subject: [NPMUG] Fwd:  c/out photoshop
In-Reply-To: <A45588A7-9825-471F-9184-8BBE2D84B0D8@mac.com>
References: <8A153669-E702-4D85-8ADC-10A4887D0A1C@mac.com>
	<A45588A7-9825-471F-9184-8BBE2D84B0D8@mac.com>
Message-ID: <6208B416-9783-456B-BF9E-93322B12B63A@davesevick.com>

Jim,

Attachment scrubber enabled ....

Dave



On Mar 1, 2006, at 6:03 AM, Jim Corsale wrote:

> the scrubbed image description: just black letters c/ white background
> from a homemade business card.
> Jim
>
> Begin forwarded message:
>
>> From: Jim Corsale <jamescorsale at mac.com>
>> Date: March 1, 2006 5:33:12 AM EST
>> To: Npmug at davesevick.com
>> Subject: [NPMUG] c/out photoshop
>>
>> without photoshop and preferably an apple application (i have a
>> limited primate brain after all) how can i edit the letters, like the
>> color,
>> of this jpeg:
>> -------------- next part --------------
>> A non-text attachment was scrubbed...
>> Name: Picture 2.png
>> Type: image/png
>> Size: 10561 bytes
>> Desc: not available
>> Url : http://davesevick.com/pipermail/npmug/attachments/20060301/
>> fc25e84a/attachment.png
>> -------------- next part --------------
>>
>> ?
>>
>> Jim
>>
>> Bob Casey: Because Pennsylvania Deserves Better
>> www.BobCaseyforPA.com
>>
>>
>> BATTLE, n.  The method of untying with the teeth a political knot
>> that would not yield to the tongue.  -Ambrose Bierce, The Devil's
>> Dictionary
>>
>>
>> _______________________________________________
>> NPMUG mailing list
>> NPMUG at davesevick.com
>> http://davesevick.com/mailman/listinfo/npmug
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: http://davesevick.com/pipermail/npmug/attachments/ 
> 20060301/1ef0f062/attachment.htm
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From jamescorsale at mac.com  Wed Mar  1 07:10:21 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Wed, 1 Mar 2006 09:10:21 -0500
Subject: [NPMUG] youtube
Message-ID: <728411FE-3BDB-443F-A6FC-7DD5E7396E6D@mac.com>

check out the" iPod marketing by Microsoft" parody at youtubedotcom

Jim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060301/f7c897b8/attachment.htm 

From jeff at szuhay.org  Wed Mar  1 07:47:33 2006
From: jeff at szuhay.org (Jeff Szuhay)
Date: Wed, 01 Mar 2006 09:47:33 -0500
Subject: [NPMUG] youtube
In-Reply-To: <728411FE-3BDB-443F-A6FC-7DD5E7396E6D@mac.com>
References: <728411FE-3BDB-443F-A6FC-7DD5E7396E6D@mac.com>
Message-ID: <BAE4488E-D7AA-433B-BA47-20B021D780A7@szuhay.org>

go to <http://www.youtube.com>
search for "Microsoft" and "iPod"

yep, its funny in a geek-marketer sort of way.

jeff

On Mar 1, 2006, at 9:10 AM, Jim Corsale wrote:

> check out the" iPod marketing by Microsoft" parody at youtubedotcom

--
    Give a man a fire, and he will stay warm for a day.
    Set a man on fire, he stays warm for the rest of his life




From dave at davesevick.com  Wed Mar  1 10:12:59 2006
From: dave at davesevick.com (Dave Sevick)
Date: Wed, 1 Mar 2006 12:12:59 -0500
Subject: [NPMUG] Charles Firth in the news on Apple security issues
In-Reply-To: <655B7E3F-5337-4C24-919B-8366F359653A@firthconsulting.com>
References: <655B7E3F-5337-4C24-919B-8366F359653A@firthconsulting.com>
Message-ID: <F67BDCC8-B2B8-4C3A-9D27-456502936416@davesevick.com>

On Mar 1, 2006, at 10:33 AM, Charles Firth wrote:

> Ok, so he didn't get all my quotes exactly right, for example I  
> don't think I actually said the bit at the end, but here's a local  
> news report using me as the source for Mac security info.
>
> http://www.timesonline.com/site/news.cfm? 
> newsid=16201601&BRD=2305&PAG=461&dept_id=478569&rfi=8

02/26/2006
Apple computers troubled by security breaches
Michael Pound, Times Staff


The sense of security felt by Apple Macintosh users was shattered  
last week, when computer security firms reported not one, not two,  
but three security breaches for Apple's OS X operating system.

But for Apple users, three security breaches is a bad year, said  
Charles Firth, owner of Firth Consulting, a Pittsburgh-based  
networking firm that specializes in Macintoshes.

"We're not used to this kind of thing, and it's causing something of  
an uproar," Firth said. "Windows users deal with this stuff all the  
time, and they're used to constantly updating anti-virus software and  
downloading patches from Microsoft, but for Apple users, this is a  
huge thing, relatively speaking.

"My phone has been ringing off the hook," Firth said. "People with  
Apple networks are definitely concerned."

The three breaches, reported on consecutive days last week:

* The "Oompa-Loompa Trojan," a worm that spreads itself via the  
addresses in a user's iChat application. Firth said the worm  
disguises itself as a set of screen shots of an upcoming version of  
OS X.

"It requires the user to download it and open it," he said. "The big  
red flag is that it also forces your computer to ask you for your  
user ID and your password, which only happens when you're making a  
substantial change."

Firth said Oompa-Loompa is potentially the most harmful of the three  
breaches: "It can attach itself to files and applications and do some  
serious damage."

* The Inqtana.A, a worm that spreads itself through Bluetooth  
wireless devices to the host computer. Firth said Inqtana.A was  
designed to exploit a security hole that Apple released a patch for  
last year. It won't do any damage, but a subsequent version could -  
if users aren't up-to-date on Apple-released security updates.

"If you've been updating, your computer is protected," he said. "And  
even if you're not up-to-date, Bluetooth wireless networks are so  
limited in range that it's pretty likely you're not going to have a  
problem."

* A hole in Safari, Apple's OS X Web browser. This isn't an actual  
virus or worm; rather, it's a problem with the browser's design that  
could automatically open downloaded files that are usually considered  
safe to open - pictures, movies, text documents and other common files.

The problem would come up if a hacker disguises a virus as one of  
those common files. If the user downloads the file and it opens  
automatically, that user has no chance to head off the potential damage.

Firth said the fix for the Safari hole is simple - users should  
uncheck the "Open 'safe' files after downloading" preference setting,  
listed under General Preferences.

So why aren't Apple users as vigilant in protecting their computers  
as Windows users? Firth said the sheer volume of malicious hacks that  
target the Windows operating system is largely a product of the sheer  
number of Windows users - the Microsoft operating system runs about  
90 percent of the world's computers.

Apple's market share? Just under 3 percent.

"If you're writing malicious code and you want to make a splash, you  
target Windows," Firth said. "There are tons of Apple computers out  
there, but in relative terms, the market share is tiny."

And that, Firth said, has bred a false sense of security among Apple  
owners.

"As I said, we don't have to address these questions very often," he  
said. "It may be time that we start paying attention."

Michael Pound can be reached online at mpound at timesonline.com.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060301/817248b5/attachment.htm 

From dave at davesevick.com  Wed Mar  1 10:14:56 2006
From: dave at davesevick.com (Dave Sevick)
Date: Wed, 1 Mar 2006 12:14:56 -0500
Subject: [NPMUG] youtube
In-Reply-To: <728411FE-3BDB-443F-A6FC-7DD5E7396E6D@mac.com>
References: <728411FE-3BDB-443F-A6FC-7DD5E7396E6D@mac.com>
Message-ID: <FAE19D43-43FA-45B8-BA5F-2A80C43B027A@davesevick.com>

Jim, Jeff and all ....

Funny you mention this ... I'm going to show this Microsoft  
advertising spoof tonight at the Cranberry Meeting.

Many other videos are on tap for tonight.

Dave


On Mar 1, 2006, at 9:10 AM, Jim Corsale wrote:

> check out the" iPod marketing by Microsoft" parody at youtubedotcom
>
> Jim
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: http://davesevick.com/pipermail/npmug/attachments/20060301/ 
> f7c897b8/attachment.htm
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From jamescorsale at mac.com  Wed Mar  1 11:21:04 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Wed, 1 Mar 2006 13:21:04 -0500
Subject: [NPMUG] youtube
In-Reply-To: <FAE19D43-43FA-45B8-BA5F-2A80C43B027A@davesevick.com>
References: <728411FE-3BDB-443F-A6FC-7DD5E7396E6D@mac.com>
	<FAE19D43-43FA-45B8-BA5F-2A80C43B027A@davesevick.com>
Message-ID: <76B7EDF7-3A9A-464A-801E-A023BEB0F149@mac.com>

IT paroding seems to be peaking...Steve Jobs on SNL, David Letterman  
just did an iPod "skit"...he showed a tiny iPod that holds 0  
songs...that was a good one.
oh, and I can't forget Stewie's (Family Guy) iPod commercial to the  
song "The Warrior"...i'm sure you can find it somewhere online.

Jim



"We will be better and braver if we believe it right to look for what  
we don't know than if we believe there is no point in looking."  - 
Socrates (Plato [Meno])



On Mar 1, 2006, at 12:14 PM, Dave Sevick wrote:

> Jim, Jeff and all ....
>
> Funny you mention this ... I'm going to show this Microsoft  
> advertising spoof tonight at the Cranberry Meeting.
>
> Many other videos are on tap for tonight.
>
> Dave
>
>
> On Mar 1, 2006, at 9:10 AM, Jim Corsale wrote:
>
>> check out the" iPod marketing by Microsoft" parody at youtubedotcom
>>
>> Jim
>>
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL: http://davesevick.com/pipermail/npmug/attachments/20060301/ 
>> f7c897b8/attachment.htm
>> _______________________________________________
>> NPMUG mailing list
>> NPMUG at davesevick.com
>> http://davesevick.com/mailman/listinfo/npmug
>>
>


From fozard at nauticom.net  Wed Mar  1 12:12:52 2006
From: fozard at nauticom.net (Fozard)
Date: Wed, 01 Mar 2006 14:12:52 -0500
Subject: [NPMUG] Comcast Security Hole - Info from "ECUNET.ORG" a church
	oriented site
Message-ID: <4405F234.3030609@nauticom.net>


Subject: Comcast Security Hole
To: THE MACINTOSH (Add to your address book 
<http://lutherlink.faithgroups.com/conference/ad.html?discussion_group=ecunet.mtg91-1770&number=13837&note_view_page=0&address=THE+MACINTOSH&HEADER_SET=&attribute=meetingnames>)
From: Mike Bailey (Add to your address book 
<http://lutherlink.faithgroups.com/conference/ad.html?discussion_group=ecunet.mtg91-1770&number=13837&note_view_page=0&address=Mike+Bailey&HEADER_SET=&attribute=peoplenames>)
Date: 02/28/06 10:57 CST
<http://lutherlink.faithgroups.com/conference/post.html?close_window=1&title_gif=images/ban_reply.gif&discussion_group=ecunet.mtg91-1770&number=13837&type=reply&HEADER_SET=&note_view_page=0>

For all you Comcast users out there, the following is copied from  
today's Macfixit home page. < http://www.macfixit.com/ > Be aware and  
be cautious. If I were a Comcast subscriber, I would use the  
recommended command to delete the rootkit -- those are dangerous  
security holes and IMHO it is inexcusable that Comcast should install  
anything without giving the user the option to install or not.

Mike Bailey

_________________________

MacFixIt reader Rob Pattay recently alerted us to a potential  
security hole opened by Comcast's high-speed Internet software.

Essentially, Comcast's software installs several files into the  
user's home directory that make use of the setuid flag -- a UNIX  
convention that changes the effective user ID while a process is  
being run. In other words, it allows a given program to escalate its  
privileges and run as -- among other things -- root (the superuser).

What this means is that the files installed by Comcast have the  
capability to execute as root without asking for permission -- a  
dangerous proposition, and an unnecessary security violation enacted  
by software installed on a large number of Mac OS X users' systems.

The files installed by Comcast's software (which still makes  
exclusive use of AppleScript and Internet Explorer) are as follows:

-rwsr-sr-x 1 root admin 255676 Aug 7 01:23 .netprefs
-rw-r--r-- 1 root admin 36 Aug 7 01:23 .netprefs_current
-rw-r--r-- 1 root admin 43740 Aug 7 01:23 .netprefs_services
-rw-r--r-- 1 root admin 7490 Aug 7 01:23 .netprefs_sets
-rw-r--r-- 1 root admin 501 Aug 7 01:23 .netprefs_system
Rob Pattay writes:

"Turns out what installed these files on my system with setuid in  
effect was Comcast.  My Comcast connection went flakey about a month  
ago and I ended up having to set it up again using the Comcast  
installation software."

Though Comcast's software doesn't appear to have any malicious  
intent, the precedent (a veritable rootkit) being set is dangeorus,  
and could potentially be used by other malware to cause serious damage.

You can use the following Terminal command to remove these files if  
they are present on your system (with no detrimental affects to your  
Comcast Internet access):

sudo rm ~/.netprefs*

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060301/d7f2d3d7/attachment.htm 

From dave at davesevick.com  Wed Mar  1 12:18:50 2006
From: dave at davesevick.com (Dave Sevick)
Date: Wed, 1 Mar 2006 14:18:50 -0500
Subject: [NPMUG] Comcast Security Hole - Info from "ECUNET.ORG" a church
	oriented site
In-Reply-To: <4405F234.3030609@nauticom.net>
References: <4405F234.3030609@nauticom.net>
Message-ID: <F5787B7D-C678-4DAC-8C84-BDD3A07AFF59@davesevick.com>

Gene,

Thanks.

We are going to address that tonight.

Dave


On Mar 1, 2006, at 2:12 PM, Fozard wrote:

> For all you Comcast users out there, the following is copied from
> today's Macfixit home page. < http://www.macfixit.com/ > Be aware and
> be cautious. If I were a Comcast subscriber, I would use the
> recommended command to delete the rootkit -- those are dangerous
> security holes and IMHO it is inexcusable that Comcast should install
> anything without giving the user the option to install or not.
>
> Mike Bailey
>
> _________________________
>
> MacFixIt reader Rob Pattay recently alerted us to a potential
> security hole opened by Comcast's high-speed Internet software.
>
> Essentially, Comcast's software installs several files into the
> user's home directory that make use of the setuid flag -- a UNIX
> convention that changes the effective user ID while a process is
> being run. In other words, it allows a given program to escalate its
> privileges and run as -- among other things -- root (the superuser).
>
> What this means is that the files installed by Comcast have the
> capability to execute as root without asking for permission -- a
> dangerous proposition, and an unnecessary security violation enacted
> by software installed on a large number of Mac OS X users' systems.
>
> The files installed by Comcast's software (which still makes
> exclusive use of AppleScript and Internet Explorer) are as follows:
>
> -rwsr-sr-x 1 root admin 255676 Aug 7 01:23 .netprefs
> -rw-r--r-- 1 root admin 36 Aug 7 01:23 .netprefs_current
> -rw-r--r-- 1 root admin 43740 Aug 7 01:23 .netprefs_services
> -rw-r--r-- 1 root admin 7490 Aug 7 01:23 .netprefs_sets
> -rw-r--r-- 1 root admin 501 Aug 7 01:23 .netprefs_system
> Rob Pattay writes:
>
> "Turns out what installed these files on my system with setuid in
> effect was Comcast.  My Comcast connection went flakey about a month
> ago and I ended up having to set it up again using the Comcast
> installation software."
>
> Though Comcast's software doesn't appear to have any malicious
> intent, the precedent (a veritable rootkit) being set is dangeorus,
> and could potentially be used by other malware to cause serious  
> damage.
>
> You can use the following Terminal command to remove these files if
> they are present on your system (with no detrimental affects to your
> Comcast Internet access):
>
> sudo rm ~/.netprefs*
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: http://davesevick.com/pipermail/npmug/attachments/20060301/ 
> d7f2d3d7/attachment.htm
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From fozard at nauticom.net  Wed Mar  1 12:18:37 2006
From: fozard at nauticom.net (Fozard)
Date: Wed, 01 Mar 2006 14:18:37 -0500
Subject: [NPMUG] Bye Bus!!!
Message-ID: <4405F38D.7000104@nauticom.net>

Bye Bus!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060301/4ccbbb41/attachment.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: byebus_1.jpg
Type: image/jpeg
Size: 54531 bytes
Desc: not available
Url : http://davesevick.com/pipermail/npmug/attachments/20060301/4ccbbb41/attachment.jpg 

From dsoumas at nightprods.com  Wed Mar  1 12:24:59 2006
From: dsoumas at nightprods.com (Dave Soumas)
Date: Wed, 1 Mar 2006 14:24:59 -0500
Subject: [NPMUG] Comcast Security Hole
In-Reply-To: <F5787B7D-C678-4DAC-8C84-BDD3A07AFF59@davesevick.com>
References: <4405F234.3030609@nauticom.net>
	<F5787B7D-C678-4DAC-8C84-BDD3A07AFF59@davesevick.com>
Message-ID: <9258d27bafda9b41d0c9bc4c87ac7b1a@nightprods.com>

Wow,

That's interesting.  Thankfully, I use my laptop to do my network 
setups, and they only reside on it.  I promptly remove the installer 
software from my computer each time as well, and they were still 
residing in my home directory.  Grrr!  I hate having to use software to 
setup any type of connection.  I'm not going back to DSL, but, at least 
with that, I could avoid the software altogether and use the PPPoE 
client built-in to my router to authenticate the connection.

I'd be interested to know what Comcast's position on the matter may be.

- Dave






On Mar 1, 2006, at 2:18 PM, Dave Sevick wrote:

> Gene,
>
> Thanks.
>
> We are going to address that tonight.
>
> Dave
>
>
> On Mar 1, 2006, at 2:12 PM, Fozard wrote:
>
>> For all you Comcast users out there, the following is copied from
>> today's Macfixit home page. < http://www.macfixit.com/ > Be aware and
>> be cautious. If I were a Comcast subscriber, I would use the
>> recommended command to delete the rootkit -- those are dangerous
>> security holes and IMHO it is inexcusable that Comcast should install
>> anything without giving the user the option to install or not.
>>
>> Mike Bailey
>>
>> _________________________
>>
>> MacFixIt reader Rob Pattay recently alerted us to a potential
>> security hole opened by Comcast's high-speed Internet software.
>>
>> Essentially, Comcast's software installs several files into the
>> user's home directory that make use of the setuid flag -- a UNIX
>> convention that changes the effective user ID while a process is
>> being run. In other words, it allows a given program to escalate its
>> privileges and run as -- among other things -- root (the superuser).
>>
>> What this means is that the files installed by Comcast have the
>> capability to execute as root without asking for permission -- a
>> dangerous proposition, and an unnecessary security violation enacted
>> by software installed on a large number of Mac OS X users' systems.
>>
>> The files installed by Comcast's software (which still makes
>> exclusive use of AppleScript and Internet Explorer) are as follows:
>>
>> -rwsr-sr-x 1 root admin 255676 Aug 7 01:23 .netprefs
>> -rw-r--r-- 1 root admin 36 Aug 7 01:23 .netprefs_current
>> -rw-r--r-- 1 root admin 43740 Aug 7 01:23 .netprefs_services
>> -rw-r--r-- 1 root admin 7490 Aug 7 01:23 .netprefs_sets
>> -rw-r--r-- 1 root admin 501 Aug 7 01:23 .netprefs_system
>> Rob Pattay writes:
>>
>> "Turns out what installed these files on my system with setuid in
>> effect was Comcast.  My Comcast connection went flakey about a month
>> ago and I ended up having to set it up again using the Comcast
>> installation software."
>>
>> Though Comcast's software doesn't appear to have any malicious
>> intent, the precedent (a veritable rootkit) being set is dangeorus,
>> and could potentially be used by other malware to cause serious
>> damage.
>>
>> You can use the following Terminal command to remove these files if
>> they are present on your system (with no detrimental affects to your
>> Comcast Internet access):
>>
>> sudo rm ~/.netprefs*
>>
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL: http://davesevick.com/pipermail/npmug/attachments/20060301/
>> d7f2d3d7/attachment.htm
>> _______________________________________________
>> NPMUG mailing list
>> NPMUG at davesevick.com
>> http://davesevick.com/mailman/listinfo/npmug
>>
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From diego96 at mac.com  Wed Mar  1 12:38:55 2006
From: diego96 at mac.com (Douglas Green)
Date: Wed, 1 Mar 2006 14:38:55 -0500
Subject: [NPMUG] Comcast Security Hole - Info from "ECUNET.ORG" a church
	oriented site
In-Reply-To: <F5787B7D-C678-4DAC-8C84-BDD3A07AFF59@davesevick.com>
References: <4405F234.3030609@nauticom.net>
	<F5787B7D-C678-4DAC-8C84-BDD3A07AFF59@davesevick.com>
Message-ID: <F39B9C45-6B4E-4814-925A-3AE4C8699FA9@mac.com>

I'm confused about this problem - I use comcast, but don't recall  
ever having to use any software for my connection. I use a single  
laptop connected wirelessly via Airport express. Essentially, it  
looks like this: cable->modem->airport express->laptop. Why would my  
setup (or any other for that matter) require anything more than  
enabling DHCP for the IP address (which is automatically done by the  
Airport Express)?

Furthermore, even if an executable's setuid from a user's directory  
was changed, isn't that process STILL going to run within the  
limitations of a given user's permissions (ie: executing that code as  
that user)?

Thanks,
Doug


On Mar 1, 2006, at 2:18 PM, Dave Sevick wrote:

> Gene,
>
> Thanks.
>
> We are going to address that tonight.
>
> Dave
>
>
> On Mar 1, 2006, at 2:12 PM, Fozard wrote:
>
>> For all you Comcast users out there, the following is copied from
>> today's Macfixit home page. < http://www.macfixit.com/ > Be aware and
>> be cautious. If I were a Comcast subscriber, I would use the
>> recommended command to delete the rootkit -- those are dangerous
>> security holes and IMHO it is inexcusable that Comcast should install
>> anything without giving the user the option to install or not.
>>
>> Mike Bailey
>>
>> _________________________
>>
>> MacFixIt reader Rob Pattay recently alerted us to a potential
>> security hole opened by Comcast's high-speed Internet software.
>>
>> Essentially, Comcast's software installs several files into the
>> user's home directory that make use of the setuid flag -- a UNIX
>> convention that changes the effective user ID while a process is
>> being run. In other words, it allows a given program to escalate its
>> privileges and run as -- among other things -- root (the superuser).
>>
>> What this means is that the files installed by Comcast have the
>> capability to execute as root without asking for permission -- a
>> dangerous proposition, and an unnecessary security violation enacted
>> by software installed on a large number of Mac OS X users' systems.
>>
>> The files installed by Comcast's software (which still makes
>> exclusive use of AppleScript and Internet Explorer) are as follows:
>>
>> -rwsr-sr-x 1 root admin 255676 Aug 7 01:23 .netprefs
>> -rw-r--r-- 1 root admin 36 Aug 7 01:23 .netprefs_current
>> -rw-r--r-- 1 root admin 43740 Aug 7 01:23 .netprefs_services
>> -rw-r--r-- 1 root admin 7490 Aug 7 01:23 .netprefs_sets
>> -rw-r--r-- 1 root admin 501 Aug 7 01:23 .netprefs_system
>> Rob Pattay writes:
>>
>> "Turns out what installed these files on my system with setuid in
>> effect was Comcast.  My Comcast connection went flakey about a month
>> ago and I ended up having to set it up again using the Comcast
>> installation software."
>>
>> Though Comcast's software doesn't appear to have any malicious
>> intent, the precedent (a veritable rootkit) being set is dangeorus,
>> and could potentially be used by other malware to cause serious
>> damage.
>>
>> You can use the following Terminal command to remove these files if
>> they are present on your system (with no detrimental affects to your
>> Comcast Internet access):
>>
>> sudo rm ~/.netprefs*
>>
>> -------------- next part --------------
>> An HTML attachment was scrubbed...
>> URL: http://davesevick.com/pipermail/npmug/attachments/20060301/
>> d7f2d3d7/attachment.htm
>> _______________________________________________
>> NPMUG mailing list
>> NPMUG at davesevick.com
>> http://davesevick.com/mailman/listinfo/npmug
>>
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug


From dave at davesevick.com  Wed Mar  1 12:57:53 2006
From: dave at davesevick.com (Dave Sevick)
Date: Wed, 1 Mar 2006 14:57:53 -0500
Subject: [NPMUG] Comcast Security Hole ... what to do ...
In-Reply-To: <9258d27bafda9b41d0c9bc4c87ac7b1a@nightprods.com>
References: <4405F234.3030609@nauticom.net>
	<F5787B7D-C678-4DAC-8C84-BDD3A07AFF59@davesevick.com>
	<9258d27bafda9b41d0c9bc4c87ac7b1a@nightprods.com>
Message-ID: <C218F4C3-D644-49E1-B596-CCDAFAB74747@davesevick.com>

Here is my suggestion to avoid the Comcast security issue.

1.  Get Comcast coax cable installed. It is a GOOD value.
2.  Get your cable modem from the installer guy.
3.  Shake hands and remind the Comcast tech  you will handle the  
install of software on your own.
4.  Take the CD and dispose.  Keep the pink receipt with your account  
number .... you'll need it.

5.  Call Comcast at the local or 800 # and ask the internet support  
person .... ask to be set  up manually with a remote activation ...  
that you have a Mac.

I will take about 5 minutes.  They'll help you with email as well.

NO SOFTWARE NEEDED.

Dave



On Mar 1, 2006, at 2:24 PM, Dave Soumas wrote:

> Wow,
>
> That's interesting.  Thankfully, I use my laptop to do my network
> setups, and they only reside on it.  I promptly remove the installer
> software from my computer each time as well, and they were still
> residing in my home directory.  Grrr!  I hate having to use  
> software to
> setup any type of connection.  I'm not going back to DSL, but, at  
> least
> with that, I could avoid the software altogether and use the PPPoE
> client built-in to my router to authenticate the connection.
>
> I'd be interested to know what Comcast's position on the matter may  
> be.
>
> - Dave
>
>
>
>
>
>
> On Mar 1, 2006, at 2:18 PM, Dave Sevick wrote:
>
>> Gene,
>>
>> Thanks.
>>
>> We are going to address that tonight.
>>
>> Dave
>>
>>
>> On Mar 1, 2006, at 2:12 PM, Fozard wrote:
>>
>>> For all you Comcast users out there, the following is copied from
>>> today's Macfixit home page. < http://www.macfixit.com/ > Be aware  
>>> and
>>> be cautious. If I were a Comcast subscriber, I would use the
>>> recommended command to delete the rootkit -- those are dangerous
>>> security holes and IMHO it is inexcusable that Comcast should  
>>> install
>>> anything without giving the user the option to install or not.
>>>
>>> Mike Bailey
>>>
>>> _________________________
>>>
>>> MacFixIt reader Rob Pattay recently alerted us to a potential
>>> security hole opened by Comcast's high-speed Internet software.
>>>
>>> Essentially, Comcast's software installs several files into the
>>> user's home directory that make use of the setuid flag -- a UNIX
>>> convention that changes the effective user ID while a process is
>>> being run. In other words, it allows a given program to escalate its
>>> privileges and run as -- among other things -- root (the superuser).
>>>
>>> What this means is that the files installed by Comcast have the
>>> capability to execute as root without asking for permission -- a
>>> dangerous proposition, and an unnecessary security violation enacted
>>> by software installed on a large number of Mac OS X users' systems.
>>>
>>> The files installed by Comcast's software (which still makes
>>> exclusive use of AppleScript and Internet Explorer) are as follows:
>>>
>>> -rwsr-sr-x 1 root admin 255676 Aug 7 01:23 .netprefs
>>> -rw-r--r-- 1 root admin 36 Aug 7 01:23 .netprefs_current
>>> -rw-r--r-- 1 root admin 43740 Aug 7 01:23 .netprefs_services
>>> -rw-r--r-- 1 root admin 7490 Aug 7 01:23 .netprefs_sets
>>> -rw-r--r-- 1 root admin 501 Aug 7 01:23 .netprefs_system
>>> Rob Pattay writes:
>>>
>>> "Turns out what installed these files on my system with setuid in
>>> effect was Comcast.  My Comcast connection went flakey about a month
>>> ago and I ended up having to set it up again using the Comcast
>>> installation software."
>>>
>>> Though Comcast's software doesn't appear to have any malicious
>>> intent, the precedent (a veritable rootkit) being set is dangeorus,
>>> and could potentially be used by other malware to cause serious
>>> damage.
>>>
>>> You can use the following Terminal command to remove these files if
>>> they are present on your system (with no detrimental affects to your
>>> Comcast Internet access):
>>>
>>> sudo rm ~/.netprefs*
>>>
>>> -------------- next part --------------
>>> An HTML attachment was scrubbed...
>>> URL: http://davesevick.com/pipermail/npmug/attachments/20060301/
>>> d7f2d3d7/attachment.htm
>>> _______________________________________________
>>> NPMUG mailing list
>>> NPMUG at davesevick.com
>>> http://davesevick.com/mailman/listinfo/npmug
>>>
>>
>> _______________________________________________
>> NPMUG mailing list
>> NPMUG at davesevick.com
>> http://davesevick.com/mailman/listinfo/npmug
>>
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From pittsburghgroups at mac.com  Wed Mar  1 20:49:37 2006
From: pittsburghgroups at mac.com (pittsburghgroups)
Date: Wed, 1 Mar 2006 22:49:37 -0500
Subject: [NPMUG] Pittsburgh,
	Woburn MA and South Mississippi working together to help flood
	hurricane victims
Message-ID: <FE3A7FD4-254A-482D-874D-60DD06123C48@mac.com>

pittsburghgroups  site updated tonight .....

New Pages:
MacWoburn of MA, Pittsburgh Apple User Groups, the South Mississippi  
Mac User Group form an alliance to serve the Gulf Coast Katrina victims







M E E T I N G S   I N    P I T T S B U R G  H

  - - -  C R A N B E R R Y  T O W N S H I P  - - -
1st Wednesday of each month, 7:00 - 9:00 PM,
Location - MacOutfitters of Cranberry724-776-8075
  http://www.macoutfitters.com
( 9PM nightcap at Primanti's in Cranberry after each meeting )
Contact: Apple User Group Ambassador - Dave Sevick - dave at davesevick.com
http://web.mac.com/pittsburghgroups/iWeb/Site/Cranberry%20Township.html

  - - -  M O N R O E V I L L E  - - -
1st Thursday of each month, 7:00 - 9:00 PM,
Location - Monroeveille Public Library 412-372-3002
( 5:30 PM coffee at Panera Bread in Miracle Mile Shopping Center  
before each meeting)
  http://www.monroevillelibrary.org/screens/cowmug.html
Contact: COWMUG President - Peter Carras - pcarras+ at pitt.edu

http://web.mac.com/pittsburghgroups/iWeb/Site/Monroeville.html

  - - - S H A D Y S I D E   - - -
3rd Sunday of each month, 6:00 - 8:00 PM,
Location -  Apple Store Shadyside 412-683-1186
http://www.apple.com/retail/shadyside
( 4PM dinner at Max and Erma's in Shadyside before each meeting )
Contact: Apple User Group Ambassador - Dave Sevick - dave at davesevick.com
http://web.mac.com/pittsburghgroups/iWeb/Site/Shadyside.html

  - - -  S O U T H  H I L L S  - - -
4th Sunday of each month, 6:00 - 8:00 PM,
Location - Apple Store  South Hills Village  412-833-1840
http://www.apple.com/retail/southhillsvillage
( 4PM dinner at the Roxy Cafe in South Hills Village,Upper Level  
before every meeting )
Contact: Apple User Group Leader - Charles Firth -  
charles at firthconsulting.com
http://web.mac.com/pittsburghgroups/iWeb/Site/South%20Hills.html

  - - -  P E N N    S T A T E    U N I V E R S I T Y   - - -
1st Tuesday of each month from 7:30 PM - 8:45 PM ( see http:// 
www.psumug.org/ical/  calendar to be sure)
Contact: Apple User Group Ambassador - Carlo Pitocco -  
gpitocco at ist.psu.edu
http://web.mac.com/pittsburghgroups/iWeb/Site/Penn%20State% 
20University.html

```````````````````````


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060301/5f59ee6c/attachment-0001.htm 

From dsoumas at nightprods.com  Wed Mar  1 21:28:17 2006
From: dsoumas at nightprods.com (Dave Soumas)
Date: Wed, 1 Mar 2006 23:28:17 -0500
Subject: [NPMUG] Comcast Security Hole ... what to do ...
In-Reply-To: <C218F4C3-D644-49E1-B596-CCDAFAB74747@davesevick.com>
References: <4405F234.3030609@nauticom.net>
	<F5787B7D-C678-4DAC-8C84-BDD3A07AFF59@davesevick.com>
	<9258d27bafda9b41d0c9bc4c87ac7b1a@nightprods.com>
	<C218F4C3-D644-49E1-B596-CCDAFAB74747@davesevick.com>
Message-ID: <b99ba2bb19cf6df217b330298deadd92@nightprods.com>

Ah, my mistaken Mac friends,

I forgot about the install day as well.  I mean, come on.  What else 
were you doing that day while you were waiting for the cable guy to 
show?  I was moving in to my brand new/used home myself.

Anyway, the only reason I remember the software issue is because I had 
to swap modems one day.  You would think all you need to do is plug 
into the router and enable DHCP, but Comcast uses a proprietary piece 
of software to authenticate the modem.  This REQUIRES the use of your 
computer.  There is no way around this (and believe me, I tried 6 ways 
to Sunday).

BTW:  I did, indeed, dispose of the software install kit from the 
original Comcast install.  Luckily for me, the only page you can access 
with a non-authenticated modem is the download site at Comcast.

Something I did do on my own:  I asked the installer for the cable and 
a whole bunch of F-type connectors (the cable connector).  He was happy 
that I would do all my cabling on my own and gave me plenty extra for 
future use.  You have to go to Radio Shack and buy the special crimper 
(Comcast uses the compression type, not the standard crimp), but it's 
worth the money if you like "rolling your own" cables.  Installers love 
me;  they're in and out in about 10 minutes.

The bottom line:

Comcast authenticates the Modem via the software package.  Unlike DSL 
or other home-based alternatives (even other cable broadband 
companies), you do not use PPPoE or the like for authentication.  This 
seems to be the method Comcast chose to take.  Right, wrong, or 
indifferent, they'll need to take a harder look if their clients 
complain about the leftovers from the installer software.

After you're done with the initial setup, you can un-install the 
software (which I did), go back to using your router & DHCP, and forget 
all about it (again).  I know I haven't thought of it much since being 
annoyed the last time.  In fact, I didn't remember until you guys 
brought it up!  It is interesting to note those files WERE still on my 
computer in my home directory.  Important safety tip, and I thank you 
guys for bringing it to our collective attention.

Seems like we have a lot of security notes lately.

- Dave


On Mar 1, 2006, at 2:57 PM, Dave Sevick wrote:

> Here is my suggestion to avoid the Comcast security issue.
>
> 1.  Get Comcast coax cable installed. It is a GOOD value.
> 2.  Get your cable modem from the installer guy.
> 3.  Shake hands and remind the Comcast tech  you will handle the 
> install of software on your own.
> 4.  Take the CD and dispose.  Keep the pink receipt with your account 
> number .... you'll need it.
>
> 5.  Call Comcast at the local or 800 # and ask the internet support 
> person .... ask to be set  up manually with a remote activation ... 
> that you have a Mac.
>
> I will take about 5 minutes.  They'll help you with email as well.
>
> NO SOFTWARE NEEDED.
>
> Dave
>
>
>
> On Mar 1, 2006, at 2:24 PM, Dave Soumas wrote:
>
>> Wow,
>>
>> That's interesting.  Thankfully, I use my laptop to do my network
>> setups, and they only reside on it.  I promptly remove the installer
>> software from my computer each time as well, and they were still
>> residing in my home directory.  Grrr!  I hate having to use software 
>> to
>> setup any type of connection.  I'm not going back to DSL, but, at 
>> least
>> with that, I could avoid the software altogether and use the PPPoE
>> client built-in to my router to authenticate the connection.
>>
>> I'd be interested to know what Comcast's position on the matter may 
>> be.
>>
>> - Dave
>>
>>
>>
>>
>>
>>
>> On Mar 1, 2006, at 2:18 PM, Dave Sevick wrote:
>>
>>> Gene,
>>>
>>> Thanks.
>>>
>>> We are going to address that tonight.
>>>
>>> Dave
>>>
>>>
>>> On Mar 1, 2006, at 2:12 PM, Fozard wrote:
>>>
>>>> For all you Comcast users out there, the following is copied from
>>>> today's Macfixit home page. < http://www.macfixit.com/ > Be aware 
>>>> and
>>>> be cautious. If I were a Comcast subscriber, I would use the
>>>> recommended command to delete the rootkit -- those are dangerous
>>>> security holes and IMHO it is inexcusable that Comcast should 
>>>> install
>>>> anything without giving the user the option to install or not.
>>>>
>>>> Mike Bailey
>>>>
>>>> _________________________
>>>>
>>>> MacFixIt reader Rob Pattay recently alerted us to a potential
>>>> security hole opened by Comcast's high-speed Internet software.
>>>>
>>>> Essentially, Comcast's software installs several files into the
>>>> user's home directory that make use of the setuid flag -- a UNIX
>>>> convention that changes the effective user ID while a process is
>>>> being run. In other words, it allows a given program to escalate its
>>>> privileges and run as -- among other things -- root (the superuser).
>>>>
>>>> What this means is that the files installed by Comcast have the
>>>> capability to execute as root without asking for permission -- a
>>>> dangerous proposition, and an unnecessary security violation enacted
>>>> by software installed on a large number of Mac OS X users' systems.
>>>>
>>>> The files installed by Comcast's software (which still makes
>>>> exclusive use of AppleScript and Internet Explorer) are as follows:
>>>>
>>>> -rwsr-sr-x 1 root admin 255676 Aug 7 01:23 .netprefs
>>>> -rw-r--r-- 1 root admin 36 Aug 7 01:23 .netprefs_current
>>>> -rw-r--r-- 1 root admin 43740 Aug 7 01:23 .netprefs_services
>>>> -rw-r--r-- 1 root admin 7490 Aug 7 01:23 .netprefs_sets
>>>> -rw-r--r-- 1 root admin 501 Aug 7 01:23 .netprefs_system
>>>> Rob Pattay writes:
>>>>
>>>> "Turns out what installed these files on my system with setuid in
>>>> effect was Comcast.  My Comcast connection went flakey about a month
>>>> ago and I ended up having to set it up again using the Comcast
>>>> installation software."
>>>>
>>>> Though Comcast's software doesn't appear to have any malicious
>>>> intent, the precedent (a veritable rootkit) being set is dangeorus,
>>>> and could potentially be used by other malware to cause serious
>>>> damage.
>>>>
>>>> You can use the following Terminal command to remove these files if
>>>> they are present on your system (with no detrimental affects to your
>>>> Comcast Internet access):
>>>>
>>>> sudo rm ~/.netprefs*
>>>>
>>>> -------------- next part --------------
>>>> An HTML attachment was scrubbed...
>>>> URL: http://davesevick.com/pipermail/npmug/attachments/20060301/
>>>> d7f2d3d7/attachment.htm
>>>> _______________________________________________
>>>> NPMUG mailing list
>>>> NPMUG at davesevick.com
>>>> http://davesevick.com/mailman/listinfo/npmug
>>>>
>>>
>>> _______________________________________________
>>> NPMUG mailing list
>>> NPMUG at davesevick.com
>>> http://davesevick.com/mailman/listinfo/npmug
>>>
>>
>> _______________________________________________
>> NPMUG mailing list
>> NPMUG at davesevick.com
>> http://davesevick.com/mailman/listinfo/npmug
>>
>
>


From charles at firthconsulting.com  Thu Mar  2 12:41:17 2006
From: charles at firthconsulting.com (Charles Firth)
Date: Thu, 2 Mar 2006 14:41:17 -0500
Subject: [NPMUG] Security update - vulnerabilities patched. That was fast.
Message-ID: <9C29A067-10FC-46C0-AEE3-7D0F5977B085@firthconsulting.com>

Apple update fixes 'critical' security bug

By John Leyden
Published Thursday 2nd March 2006 13:00 GMT
Apple released a security update (http://docs.info.apple.com/ 
article.html?artnum=303382) on Wednesday that fixes multiple  
vulnerabilities, including a critical flaw in its Safari web browser  
that created a means for hackers to attack vulnerable systems.

The security bug meant malicious hackers could rename "safe file"  
extensions stored in ZIP archives, creating a way to trick users into  
executing malicious shell scripts. The flaw meant malicious  
applications could appear as a safe file type. If Mac users had left  
the "Open safe files after downloading" option enabled in Safari then  
malware would automatically be executed as soon as a user was tricked  
into visiting a malicious-constructed website. Security researchers  
produced a proof of concept demo (http://www.us-cert.gov/current/ 
current_activity.html#safarishell) to validate their concerns about  
the critical flaw.

Apple's update tackles the issue by performing additional download  
validation so that the user is warned (in Mac OS X v10.4.5) or  
downloads are not automatically opened (in Mac OS X v10.3.9). The  
update also addresses 19 other security bugs in Mac OS X involving  
security flaws in Safari, the PHP Apache module and scripting  
environment as well as Mail and iChat security bugs, as summarised by  
Secunia here (http://secunia.com/advisories/19064/).

The appearance of the Safari bug, along with a brace of low to no  
risk worms affecting Mac OS X, spawned a lively debate between Mac  
fans and security vendors over the impact of the security flap, which  
disinterested observers judged (http://www.theregister.co.uk/ 
2006/02/27/apple_security_threats_a_reality) to be largely academic. ?



 From www.theregister.co.uk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060302/11cf91eb/attachment.htm 

From dadditude at zoominternet.net  Thu Mar  2 17:13:58 2006
From: dadditude at zoominternet.net (Dadditude)
Date: Thu, 2 Mar 2006 19:13:58 -0500
Subject: [NPMUG] youtube
In-Reply-To: <FAE19D43-43FA-45B8-BA5F-2A80C43B027A@davesevick.com>
Message-ID: <000c01c63e57$5f6a32b0$0d01a8c0@Dadditude>

A bit off-topic, but does anyone out there know the name of the piece of
music used in the last half of that video? My wife and I were trying to
remember, but had no luck. I know the first part is from "Also Sprach
Zarathustra: (Better known as the 2001 theme to most folks), but just
couldn't recall the name of the piece from the second part.

-----Original Message-----
From: npmug-bounces at davesevick.com [mailto:npmug-bounces at davesevick.com] On
Behalf Of Dave Sevick
Sent: Wednesday, March 01, 2006 12:15 PM
To: npmug at davesevick.com
Subject: Re: [NPMUG] youtube

Jim, Jeff and all ....

Funny you mention this ... I'm going to show this Microsoft  
advertising spoof tonight at the Cranberry Meeting.

Many other videos are on tap for tonight.

Dave


On Mar 1, 2006, at 9:10 AM, Jim Corsale wrote:

> check out the" iPod marketing by Microsoft" parody at youtubedotcom
>
> Jim
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: http://davesevick.com/pipermail/npmug/attachments/20060301/ 
> f7c897b8/attachment.htm
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>

_______________________________________________
NPMUG mailing list
NPMUG at davesevick.com
http://davesevick.com/mailman/listinfo/npmug




From abbeyglo at pghmail.com  Thu Mar  2 19:17:36 2006
From: abbeyglo at pghmail.com (Gloria Snyder)
Date: Thu, 2 Mar 2006 21:17:36 -0500
Subject: [NPMUG] Your Mailing List
Message-ID: <E1CF562A-AA5B-11DA-811E-00039367DA9E@pghmail.com>

Please remove me from the list.  I don't have time to read that much.  
Thanks anyway.   Gloria Snyder, abbeyglo at pghmail.com.

 Outgoing mail is Virus Scanned byNorman Data Defense.        Inbound Spam reduced 98.2% byVircom Sieve.        

From pittsburghgroups at mac.com  Fri Mar  3 03:30:31 2006
From: pittsburghgroups at mac.com (pittsburghgroups)
Date: Fri, 3 Mar 2006 05:30:31 -0500
Subject: [NPMUG] COWMUG Thursday March 2 links from meeting
Message-ID: <2925DF33-6158-4A69-AD63-06791B53428F@mac.com>

New information just  added from the Monroeville meeting led by  
COWMUG president Peter Carras.

New Pages:
Security again ... by Charles Firth

Dave
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060303/59df25fd/attachment.htm 

From fozard at nauticom.net  Fri Mar  3 07:22:45 2006
From: fozard at nauticom.net (Fozard)
Date: Fri, 03 Mar 2006 09:22:45 -0500
Subject: [NPMUG] Mac_Mini_Take_Apart_Guide
Message-ID: <44085135.1060100@nauticom.net>

After Wednesday night's discussion @ NPMUG, I thought this might be of 
interest:

http://www.applefritter.com/Mac_Mini_Take_Apart_Guide

From dave at davesevick.com  Fri Mar  3 21:23:39 2006
From: dave at davesevick.com (Dave Sevick)
Date: Fri, 3 Mar 2006 23:23:39 -0500
Subject: [NPMUG] Step back and admire this story of an autistic HS
	basketball team manager
Message-ID: <8ADFC89D-F599-4204-90AF-75E0DBA5F442@davesevick.com>

http://video.google.com/videoplay?docid=-818944862742874918&q=Autistic 
+basketball


A heartwarming short movie  about an autistic HS basketball  
manager ... with an unexpected ending.



I know this is not computer related ... but is worth a watch.

Many thanks to Sandy Usher for sending this my way ..

From mattbocchi at gmail.com  Sat Mar  4 20:56:45 2006
From: mattbocchi at gmail.com (Matt Bocchi)
Date: Sat, 4 Mar 2006 22:56:45 -0500
Subject: [NPMUG] Airport Graphite
Message-ID: <AF0B790E-83BE-40B3-9E31-32BD2258B8B8@gmail.com>

I have a wireless setup with an old Airport Graphite and an Airport  
Express in client mode for broadcasting iTunes.  Whenever I try to  
change the settings on the Graphite it comes up with and error  
message reading "The Airport Admin Utility was unable to read the  
configuration of the selected base station.  An error occurred while  
reading the configuration."  I have tried doing a hard reset, but  
this does nothing.  Does anyone have any advice?

Thanks,
Matt Bocchi
mattbocchi at gmail.com

"Love is what makes you smile when you're tired."




From jamescorsale at mac.com  Sun Mar  5 10:58:05 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Sun, 5 Mar 2006 12:58:05 -0500
Subject: [NPMUG] faxing
Message-ID: <FF490CDE-7F43-4F92-B714-73D6298DA4FC@mac.com>

i was under the impression that you could use a macintosh as
a fax machine c/out a fax machine...is this false?

Jim
Bob Casey: Because Pennsylvania Deserves Better
www.BobCaseyforPA.com


PLAN, v.t.  To bother about the best method of accomplishing an  
accidental result.  -Ambrose Bierce, The Devil's Dictionary



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060305/3f86a994/attachment.htm 

From markd at borkware.com  Sun Mar  5 11:13:30 2006
From: markd at borkware.com (Mark Dalrymple)
Date: Sun, 5 Mar 2006 13:13:30 -0500
Subject: [NPMUG] faxing
In-Reply-To: <FF490CDE-7F43-4F92-B714-73D6298DA4FC@mac.com>
References: <FF490CDE-7F43-4F92-B714-73D6298DA4FC@mac.com>
Message-ID: <3E3EB2E3-DBDB-4740-9E02-3B14EFA9AFFE@borkware.com>

> i was under the impression that you could use a macintosh as
> a fax machine c/out a fax machine...is this false?

Sending faxes can be done from the print dialog.

Googling for "Macintosh Receive Fax" had this as the second hit:
http://www.apple.com/macosx/features/faxing/, so look in the system  
preferences under "Print and Fax"

Cheers,
++md


From jeff at szuhay.org  Sun Mar  5 11:26:08 2006
From: jeff at szuhay.org (Jeff Szuhay)
Date: Sun, 05 Mar 2006 13:26:08 -0500
Subject: [NPMUG] faxing
In-Reply-To: <FF490CDE-7F43-4F92-B714-73D6298DA4FC@mac.com>
References: <FF490CDE-7F43-4F92-B714-73D6298DA4FC@mac.com>
Message-ID: <0C97E3B1-C770-410E-B7B9-3495CCCA9879@szuhay.org>


On Mar 5, 2006, at 12:58 PM, Jim Corsale wrote:
> i was under the impression that you could use a macintosh as
> a fax machine c/out a fax machine...is this false?

No. Since OS X 10.2 or 10.3, you can both send and receive faxes
In 10.4 you can "print to fax".

See (in OS X 10.4) System Preferences, Hardware Group, Print & Fax,
Fax tab.

Play with it (with another fax machine) to be certain you understand how
it works.

I would recommended looking at Mac Help, but for some reason mine isn't
working at all under 10.4.5. Grrrr.

jw

--
    Give a man a fire, and he will stay warm for a day.
    Set a man on fire, he stays warm for the rest of his life




From fabdana at mac.com  Sun Mar  5 12:11:20 2006
From: fabdana at mac.com (Dana Spiardi)
Date: Sun, 05 Mar 2006 14:11:20 -0500
Subject: [NPMUG] iPod contents erased
Message-ID: <12353618.1141585880541.JavaMail.fabdana@mac.com>

I have a relatively new Belkin 6-port Firewire hub, into which I connect my iPod, LaCie external drive, video camera, etc.  The hub is powered by AC.  One day I accidentally yanked the hub's Firewire out of my iBook, which somehow caused my iPod to lock-up.  (it's a 30GB iPod, which I purchased in 2003).  I read some iPod tips on the internet, which suggested I hold down the Play and Menu buttons together for a few seconds to activate it.  This allowed me to turn it on, but all of my songs were erased in the process!   Why would this happen?  Should I not connect the iPod through the hub from now on?  (Up until recently I did NOT have the iPod powered by the iBook; I kept it charged using its own power supply).  I don't think the iPod battery could have died; the device does not get extensive use. I used it two weeks ago, and everything seemed fine.  

I've had some trouble with the iPod locking up in the past (the screen wouldn't change when I pressed Menu, etc.); but it always managed to unlock itself somehow. 

Any suggestions for preventing this from happening again?

Thanks,
Dana
COWMUG  



Dana Spiardi
fabdana at mac.com
http://www.fabdana.com
home: 724.325.3573
cell: 412.215.0562


From gawst99 at earthlink.net  Thu Mar  2 20:17:05 2006
From: gawst99 at earthlink.net (graham whitlow)
Date: Thu, 2 Mar 2006 22:17:05 -0500
Subject: [NPMUG] remove
Message-ID: <30E45602-AA64-11DA-90FC-000393948B44@earthlink.net>

Please remove me from your mailing list.
Thanks

Graham Whitlow


From jeffszuhay at mac.com  Sun Mar  5 12:58:18 2006
From: jeffszuhay at mac.com (Jeff Szuhay)
Date: Sun, 5 Mar 2006 14:58:18 -0500
Subject: [NPMUG] online help site
Message-ID: <76A98862-0969-4D77-9D2C-C986D7B3FCF2@mac.com>

In fixing my Help View.app problem, I came across
MacOSX.com <http://macosx.com/>, a very useful
site with very explicit instructions about how to
fix a wide variety of problems.

jw

--
    Give a man a fire, and he will stay warm for a day.
    Set a man on fire, he stays warm for the rest of his life




From diego96 at mac.com  Sun Mar  5 15:25:14 2006
From: diego96 at mac.com (Douglas Green)
Date: Sun, 5 Mar 2006 17:25:14 -0500
Subject: [NPMUG] Mail
Message-ID: <DF1793F8-8DA8-4435-982A-9BA9BB7A470E@mac.com>

The Mail Application on my machine (17in PB G4, 1Ghz) has become VERY  
buggy. I'm running a current version (2.0.7) on OSX v 10.4.5. I  
started noticing problems around v.10.4- it started having trouble  
sending/receiving mail and frequently put sent mail into the "drafts"  
folder. Occasionally, I would hear the "swoosh" of sent mail LONG  
after I had pressed the send button (like a day or hours). I'm  
connected to the internet via Cable modem, and have had no other  
problems with connectivity. Lately, Mail has started locking up  
completely with the swirling beachball and "not responding" in the  
force-quit dialog.

Is anyone else having these problems? I'm wondering if it's time to  
switch back to Entourage...
Thanks,
Doug


From diego96 at mac.com  Sun Mar  5 15:25:14 2006
From: diego96 at mac.com (Douglas Green)
Date: Sun, 5 Mar 2006 17:25:14 -0500
Subject: [NPMUG] Mail
Message-ID: <DF1793F8-8DA8-4435-982A-9BA9BB7A470E@mac.com>

The Mail Application on my machine (17in PB G4, 1Ghz) has become VERY  
buggy. I'm running a current version (2.0.7) on OSX v 10.4.5. I  
started noticing problems around v.10.4- it started having trouble  
sending/receiving mail and frequently put sent mail into the "drafts"  
folder. Occasionally, I would hear the "swoosh" of sent mail LONG  
after I had pressed the send button (like a day or hours). I'm  
connected to the internet via Cable modem, and have had no other  
problems with connectivity. Lately, Mail has started locking up  
completely with the swirling beachball and "not responding" in the  
force-quit dialog.

Is anyone else having these problems? I'm wondering if it's time to  
switch back to Entourage...
Thanks,
Doug


From calliex at mac.com  Sun Mar  5 16:18:06 2006
From: calliex at mac.com (Joe Condle)
Date: Sun, 5 Mar 2006 18:18:06 -0500
Subject: [NPMUG] Mail
In-Reply-To: <DF1793F8-8DA8-4435-982A-9BA9BB7A470E@mac.com>
References: <DF1793F8-8DA8-4435-982A-9BA9BB7A470E@mac.com>
Message-ID: <A4468F6C-242F-41B0-A3F5-4F1A8BC129B7@mac.com>

I have the same machine that you do.  I had this problem for the  
first time today.  Mail I sent never actually got sent.  I waited 5  
min and it was still trying to send.  I went into utilities and  
forced quit mail. When I restarted the application the mail was sent  
immediately.  I also have a cable modem.  It seems to take a awful  
longtime for mail to open on my computer.  I am using .Mac mail.    
Not till today did I have the problem you describe.

I am running 10.4.5 and mail 2.0.7

Joe

On Mar 5, 2006, at 5:25 PM, Douglas Green wrote:

> The Mail Application on my machine (17in PB G4, 1Ghz) has become VERY
> buggy. I'm running a current version (2.0.7) on OSX v 10.4.5. I
> started noticing problems around v.10.4- it started having trouble
> sending/receiving mail and frequently put sent mail into the "drafts"
> folder. Occasionally, I would hear the "swoosh" of sent mail LONG
> after I had pressed the send button (like a day or hours). I'm
> connected to the internet via Cable modem, and have had no other
> problems with connectivity. Lately, Mail has started locking up
> completely with the swirling beachball and "not responding" in the
> force-quit dialog.
>
> Is anyone else having these problems? I'm wondering if it's time to
> switch back to Entourage...
> Thanks,
> Doug
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug


From patrick at patrickcranston.com  Sun Mar  5 16:36:03 2006
From: patrick at patrickcranston.com (Patrick Cranston)
Date: Sun, 5 Mar 2006 18:36:03 -0500
Subject: [NPMUG] Mail
In-Reply-To: <A4468F6C-242F-41B0-A3F5-4F1A8BC129B7@mac.com>
References: <DF1793F8-8DA8-4435-982A-9BA9BB7A470E@mac.com>
	<A4468F6C-242F-41B0-A3F5-4F1A8BC129B7@mac.com>
Message-ID: <8A26D352-DAE0-4E10-8234-C167AA426D9C@patrickcranston.com>

It sounds like you are experiencing corrupted mailboxes.   
Unfortunately, this seems to be a problem with Mail.  I have fixed  
several computers with this problem.  I'm not sure what causes it but  
it happens more on computers that have been using Mail for a long  
period of time.  There is no quick fix.  To get mail working again  
properly -
1) First, back up (ie make a copy) your mail folder (User/Library/Mail)
2) delete all your email accounts.
3) Import your old mail boxes back into your Mail program from your  
backup using Mail's import feature.

If you are not comfortable doing this yourself - you can set up an  
appointment with myself or Dave Sevick to come do it for you.  Fees  
do apply ;-)
Best of Luck

Patrick Cranston
Cranston Consulting & Media
(412) 303-0971
www.patrickcranston.com
patrick at patrickcranston.com



On Mar 5, 2006, at 6:18 PM, Joe Condle wrote:

> I have the same machine that you do.  I had this problem for the
> first time today.  Mail I sent never actually got sent.  I waited 5
> min and it was still trying to send.  I went into utilities and
> forced quit mail. When I restarted the application the mail was sent
> immediately.  I also have a cable modem.  It seems to take a awful
> longtime for mail to open on my computer.  I am using .Mac mail.
> Not till today did I have the problem you describe.
>
> I am running 10.4.5 and mail 2.0.7
>
> Joe
>
> On Mar 5, 2006, at 5:25 PM, Douglas Green wrote:
>
>> The Mail Application on my machine (17in PB G4, 1Ghz) has become VERY
>> buggy. I'm running a current version (2.0.7) on OSX v 10.4.5. I
>> started noticing problems around v.10.4- it started having trouble
>> sending/receiving mail and frequently put sent mail into the "drafts"
>> folder. Occasionally, I would hear the "swoosh" of sent mail LONG
>> after I had pressed the send button (like a day or hours). I'm
>> connected to the internet via Cable modem, and have had no other
>> problems with connectivity. Lately, Mail has started locking up
>> completely with the swirling beachball and "not responding" in the
>> force-quit dialog.
>>
>> Is anyone else having these problems? I'm wondering if it's time to
>> switch back to Entourage...
>> Thanks,
>> Doug
>>
>> _______________________________________________
>> NPMUG mailing list
>> NPMUG at davesevick.com
>> http://davesevick.com/mailman/listinfo/npmug
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From cuzinbruce at fastermac.net  Sun Mar  5 18:21:42 2006
From: cuzinbruce at fastermac.net (CuZinBruce)
Date: Sun, 5 Mar 2006 20:21:42 -0500
Subject: [NPMUG] Mail
In-Reply-To: <DF1793F8-8DA8-4435-982A-9BA9BB7A470E@mac.com>
References: <DF1793F8-8DA8-4435-982A-9BA9BB7A470E@mac.com>
Message-ID: <6BF1D3A3-917F-4506-B9DC-28AB2FC80F62@fastermac.net>

Doug,

I don't have and answer to your question but I thought I would report  
the following:

I too am using Mail, running 10.4.5 and aside from getting 2  copies  
of your message I also noticed that the beachball spun around for an  
unknown period of time after I clicked to open your message. I would  
expect this for a message with a big attachment but not one that is  
shown as 3.1KB.

Bruce Wells




On Mar 5, 2006, at 5:25 PM, Douglas Green wrote:

> The Mail Application on my machine (17in PB G4, 1Ghz) has become VERY
> buggy. I'm running a current version (2.0.7) on OSX v 10.4.5. I
> started noticing problems around v.10.4- it started having trouble
> sending/receiving mail and frequently put sent mail into the "drafts"
> folder. Occasionally, I would hear the "swoosh" of sent mail LONG
> after I had pressed the send button (like a day or hours). I'm
> connected to the internet via Cable modem, and have had no other
> problems with connectivity. Lately, Mail has started locking up
> completely with the swirling beachball and "not responding" in the
> force-quit dialog.
>
> Is anyone else having these problems? I'm wondering if it's time to
> switch back to Entourage...
> Thanks,
> Doug
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug


From dsoumas at nightprods.com  Sun Mar  5 20:03:25 2006
From: dsoumas at nightprods.com (Dave Soumas)
Date: Sun, 5 Mar 2006 22:03:25 -0500
Subject: [NPMUG] Airport Graphite
In-Reply-To: <AF0B790E-83BE-40B3-9E31-32BD2258B8B8@gmail.com>
References: <AF0B790E-83BE-40B3-9E31-32BD2258B8B8@gmail.com>
Message-ID: <dcf9871f56cdc7b1f78b8818892f5c63@nightprods.com>

Matt,

I'm not sure if you can connect the Graphite as a client to the 
Express.  I think I had trouble with that previously.

If your question is pertaining to connectivity to the unit for 
configuration, my recommendation is use a Ethernet cable directly 
connected to your computer.  The Airport Admin will pick it up more 
reliably and allow you to put together an initial config.  After you 
get things setup initially (password, IP's, etc.), you should be able 
to get to it via wireless.

- Dave

On Mar 4, 2006, at 10:56 PM, Matt Bocchi wrote:

> I have a wireless setup with an old Airport Graphite and an Airport
> Express in client mode for broadcasting iTunes.  Whenever I try to
> change the settings on the Graphite it comes up with and error
> message reading "The Airport Admin Utility was unable to read the
> configuration of the selected base station.  An error occurred while
> reading the configuration."  I have tried doing a hard reset, but
> this does nothing.  Does anyone have any advice?
>
> Thanks,
> Matt Bocchi
> mattbocchi at gmail.com
>
> "Love is what makes you smile when you're tired."
>
>
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From pittsburghgroups at mac.com  Mon Mar  6 00:10:22 2006
From: pittsburghgroups at mac.com (pittsburghgroups)
Date: Mon, 6 Mar 2006 02:10:22 -0500
Subject: [NPMUG] March 2006 Monroeville user group meeting notes posted
Message-ID: <760E076E-B367-4340-B387-FEFE957A01A5@mac.com>

Modified Pages:
COWLinks and Security ....


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060306/e1f0c1b2/attachment.htm 

From charles at firthconsulting.com  Mon Mar  6 20:14:39 2006
From: charles at firthconsulting.com (Charles Firth)
Date: Mon, 6 Mar 2006 22:14:39 -0500
Subject: [NPMUG] WinXP boots on a MacBook Pro
References: <6097E786-4B71-4B06-A69F-35891F11E0C1@apple.com>
Message-ID: <1FACACAC-8279-4CC1-ADAB-1B103227BCFA@firthconsulting.com>

Leaked from a member of the OSX development team - proof! Windows XP  
boots on a Macbook Pro.


Begin forwarded message:

> From: Mark Firth <mfirth at apple.com>
> Date: March 6, 2006 5:07:14 PM EST
> To: Charles Firth <charles at firthconsulting.com>
> Subject: now you have no excuse.. (XP boots on MacBook Pro)
>
> enjoy :)
>
> -=Mark
>
>
> \?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060306/47673270/attachment-0001.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: xponamac.jpg
Type: image/jpeg
Size: 62994 bytes
Desc: not available
Url : http://davesevick.com/pipermail/npmug/attachments/20060306/47673270/attachment-0001.jpg 

From jeff at szuhay.org  Mon Mar  6 22:26:55 2006
From: jeff at szuhay.org (Jeff Szuhay)
Date: Tue, 07 Mar 2006 00:26:55 -0500
Subject: [NPMUG] Mac Hacked in 30 minutes ... Misleading Assertion
Message-ID: <EF3E809E-5396-4859-BBE7-B676106CB528@szuhay.org>

You will probably be reading about this on all the websites tomorrow  
as if
Moses had suddenly come to life and parted the waters of the Atlantic.

Please see <http://test.doit.wisc.edu/> which clarifies the  
conditions under
which this hack was accomplished. It asserts the reporting of it is  
completely
misleading itself.

Vigilance is always the best defense and awareness that any computer  
system,
no matter who makes or who maintains it may be compromised.

However, this is not the security vulnerability to send anyone  
screaming into the
night. Relax. Keep moving, honey, there's nothing to see.

Jeff

--
    Give a man a fire, and he will stay warm for a day.
    Set a man on fire, he stays warm for the rest of his life




From jeffszuhay at mac.com  Mon Mar  6 22:09:44 2006
From: jeffszuhay at mac.com (Jeff Szuhay)
Date: Tue, 7 Mar 2006 00:09:44 -0500
Subject: [NPMUG] Mac Hacked in 30 minutes ... Misleading Assertion
Message-ID: <A1556E20-1D94-4472-95D1-FB90B528E176@mac.com>

You will probably be reading about this on all the websites tomorrow  
as if
Moses had suddenly come to life and parted the waters of the Atlantic.

Please see <http://test.doit.wisc.edu/> which clarifies the  
conditions under
which this hack was accomplished. It asserts the reporting of it is  
completely
misleading itself.

Vigilance is always the best defense and awareness that any computer  
system,
no matter who makes or who maintains it may be compromised.

However, this is not the security vulnerability to send anyone  
screaming into the
night. Relax. Keep moving, honey, there's nothing to see.

Jeff

--
    Give a man a fire, and he will stay warm for a day.
    Set a man on fire, he stays warm for the rest of his life




From jamescorsale at mac.com  Sat Mar 11 14:48:33 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Sat, 11 Mar 2006 16:48:33 -0500
Subject: [NPMUG] .asx
Message-ID: <C354C4A9-8488-400F-AAC5-5022EB2E193B@mac.com>

okay,
i have a plug-in app for QT called flip4mac and just bought the pro  
version.
when i open a stream in Safari c/ the .asx extension the audio stream  
skips and skips.
what is going on?
TYIA
Jim

From jamescorsale at mac.com  Sun Mar 12 15:19:23 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Sun, 12 Mar 2006 17:19:23 -0500
Subject: [NPMUG] wmp v. 7.1
Message-ID: <1AC34C83-9465-4887-9C9C-F9E3C4982C18@mac.com>

hey,
been wrestling with windows media files, .asx in particular, to play  
in QT c/ flip4mac plugins or in newest version of wmp...i found that  
i can
stream an  .asx stream in wmp v. 7.1 running in mac classic os 9  
(typing in url)   c/ one interesting anomaly/artifact...the stream is  
playing too fast, eg, voice/music is
mickey mousey, alvin and the chipmunks!
any help wba (would be appreciated).

TIA

Jim

From ruppertm at bellatlantic.net  Mon Mar 13 07:01:55 2006
From: ruppertm at bellatlantic.net (Mark Ruppert)
Date: Mon, 13 Mar 2006 09:01:55 -0500
Subject: [NPMUG] Question about Appleworks/Pages 2
Message-ID: <44157B53.3030807@bellatlantic.net>

I just loaded OS10.4 on my G3, in an erase and install operation.   
Looked for Appleworks, and found nothing.  Perhaps it's under another 
name, but I bet I have to buy it as a stand-alone addition.  Is that 
correct?

I see it online sold separately, but also see Pages 2 in iWork.  Is 
Pages 2 meant as a full-featured replacement for Appleworks, fully 
compatible with my older Appleworks documents, etc.?

Mark
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060313/42d0c99e/attachment.htm 

From calliex at mac.com  Mon Mar 13 07:59:43 2006
From: calliex at mac.com (Joseph Condle)
Date: Mon, 13 Mar 2006 09:59:43 -0500
Subject: [NPMUG] Question about Appleworks/Pages 2
In-Reply-To: <44157B53.3030807@bellatlantic.net>
References: <44157B53.3030807@bellatlantic.net>
Message-ID: <12139191.1142261983281.JavaMail.calliex@mac.com>

Pages is a full featured word processor.  I would rank it equal to Word. It is not a replacemen for Works. Because Works contains a spreadsheet, database ,etc.

Joe 
On Monday, March 13, 2006, at 09:02AM, Mark Ruppert <ruppertm at bellatlantic.net> wrote:

>
><<Original Attached>>_______________________________________________
>NPMUG mailing list
>NPMUG at davesevick.com
>http://davesevick.com/mailman/listinfo/npmug
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060313/4dfdf171/attachment.htm 

From ruppertm at bellatlantic.net  Mon Mar 13 09:35:46 2006
From: ruppertm at bellatlantic.net (Mark Ruppert)
Date: Mon, 13 Mar 2006 11:35:46 -0500
Subject: [NPMUG] Question about Keynote and audio & video tracks
Message-ID: <44159F62.1080004@bellatlantic.net>

Thanks for the clarification and opinions on Appleworks and Pages 2.

A question about Keynote:
    Has anyone worked with Keynote enough to know if I can make a 
presentation on it including   1) slides, plus a short (4 min.) video 
segment and    2) background music/soundtrack audio of my selection, 
such as you might hear music playing behind a slide show??

    Thanks,
Mark Ruppert


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060313/b905a876/attachment.htm 

From patrick at patrickcranston.com  Mon Mar 13 09:45:41 2006
From: patrick at patrickcranston.com (Patrick Cranston)
Date: Mon, 13 Mar 2006 11:45:41 -0500
Subject: [NPMUG] Question about Keynote and audio & video tracks
In-Reply-To: <44159F62.1080004@bellatlantic.net>
References: <44159F62.1080004@bellatlantic.net>
Message-ID: <692F0144-7B69-4BFB-B355-0E055F7AFF3D@patrickcranston.com>

Yes, to all of the below.  Keynote is an excellent presentation  
software.  It tightly integrates with ilife apps and in my (not so  
humble opinion) is like PowerPoint on crack.
I hate PowerPoint.  Keynote rocks.

Patrick Cranston
Cranston Consulting & Media
(412) 303-0971
www.patrickcranston.com
patrick at patrickcranston.com



On Mar 13, 2006, at 11:35 AM, Mark Ruppert wrote:

> Thanks for the clarification and opinions on Appleworks and Pages 2.
>
> A question about Keynote:
>     Has anyone worked with Keynote enough to know if I can make a  
> presentation on it including   1) slides, plus a short (4 min.)  
> video segment and    2) background music/soundtrack audio of my  
> selection, such as you might hear music playing behind a slide show??
>
>     Thanks,
> Mark Ruppert
>
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug


From jamescorsale at mac.com  Tue Mar 14 10:32:29 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Tue, 14 Mar 2006 12:32:29 -0500
Subject: [NPMUG] scroll in drop down menus
Message-ID: <36DF8655-C3A8-48E9-91A9-BEB8A00DCAD8@mac.com>


I've been using an Apple Mighty Mouse for about 3 months now
and I'm wondering if there is any way possible to scroll within drop  
down menus
like the bookmarks in Safari?  or might Apple be adding this feature?
I guess for now the way to speed up browsing would be to get rid of the
never used urls in each bookmark.

Jim

From dave at davesevick.com  Tue Mar 14 14:45:22 2006
From: dave at davesevick.com (Dave Sevick)
Date: Tue, 14 Mar 2006 16:45:22 -0500
Subject: [NPMUG] Shadyside - Sunday March 19 - 5PM-6PM User Group meeting
Message-ID: <AD997A8F-F080-478C-ADD5-08DD54131F0B@davesevick.com>

Reminder :

We will have our next Apple User Group meeting in Shadyside at the  
Apple Store from 5PM - 6PM,  Sunday March 19 .... dinner to follow at  
Max & Erma's ( across the street on Walnut ).

Change:

Due to training schedules at the Apple Stores we will continue to  
have ONE HOUR MEETINGS and dinner AFTER EACH MEETING.  This includes  
the South Hills Village meetings on the 4th Sunday of each month.

Note:

Cranberry and Monroeville meetings remain unchanged ....

Please check the iCalendars below....


```````````````````````
Pittsburgh Groups
http://web.mac.com/pittsburghgroups/iWeb/Site/Welcome.html

```````````````````````

M E E T I N G S   I N    P I T T S B U R G  H

  - - -  C R A N B E R R Y  T O W N S H I P  - - -
1st Wednesday of each month, 7:00 - 9:00 PM,
Location - MacOutfitters of Cranberry724-776-8075
  http://www.macoutfitters.com
( 9PM nightcap at Primanti's in Cranberry after each meeting )
Contact: Apple User Group Ambassador - Dave Sevick - dave at davesevick.com
http://web.mac.com/pittsburghgroups/iWeb/Site/Cranberry%20Township.html

  - - -  M O N R O E V I L L E  - - -
1st Thursday of each month, 7:00 - 9:00 PM,
Location - Monroeveille Public Library 412-372-3002
( 5:30 PM coffee at Panera Bread in Miracle Mile Shopping Center  
before each meeting)
  http://www.monroevillelibrary.org/screens/cowmug.html
Contact: COWMUG President - Peter Carras - pcarras+ at pitt.edu
http://web.mac.com/pittsburghgroups/iWeb/Site/Monroeville.html

  - - - S H A D Y S I D E   - - -
3rd Sunday of each month, 5:00 - 6:00 PM,
Location -  Apple Store Shadyside 412-683-1186
http://www.apple.com/retail/shadyside
( 6PM dinner at Max and Erma's in Shadyside after each meeting )
Contact: Apple User Group Ambassador - Dave Sevick - dave at davesevick.com
http://web.mac.com/pittsburghgroups/iWeb/Site/Shadyside.html

  - - -  S O U T H  H I L L S  - - -
4th Sunday of each month, 5:00 - 6:00 PM,
Location - Apple Store  South Hills Village  412-833-1840
http://www.apple.com/retail/southhillsvillage
( 6PM dinner at the Roxy Cafe in South Hills Village,Upper Level  
after every meeting )
Contact: Apple User Group Leader - Charles Firth -  
charles at firthconsulting.com
http://web.mac.com/pittsburghgroups/iWeb/Site/South%20Hills.html

  - - -  P E N N    S T A T E    U N I V E R S I T Y   - - -
1st Tuesday of each month from 7:30 PM - 8:45 PM ( see http:// 
www.psumug.org/ical/  calendar to be sure)
Contact: Apple User Group Ambassador - Carlo Pitocco -  
gpitocco at ist.psu.edu
http://web.mac.com/pittsburghgroups/iWeb/Site/Penn%20State% 
20University.html

```````````````````````


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060314/e79aac9d/attachment-0001.htm 

From jamescorsale at mac.com  Tue Mar 14 16:53:59 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Tue, 14 Mar 2006 18:53:59 -0500
Subject: [NPMUG] chess?
Message-ID: <6914929A-0C13-499E-B11F-EE07507EF30E@mac.com>

Are there any Chess aficionados out there on the listserv?  If so,
what Chess software will best suit a beginner who wants to learn from
a great machine (iMac) c/ good Chess software onboard?

(just start with the Apple Chess game?)

Jim
yes, i never learned to play Chess.

From macplus512 at verizon.net  Tue Mar 14 17:38:24 2006
From: macplus512 at verizon.net (Scott Baret)
Date: Tue, 14 Mar 2006 19:38:24 -0500
Subject: [NPMUG] chess?
In-Reply-To: <6914929A-0C13-499E-B11F-EE07507EF30E@mac.com>
Message-ID: <02EC898A-B3BC-11DA-B7BE-000393CC5B36@verizon.net>

I first learned chess by trial and error on the 1991 B&W version of 
Battle Chess! The Apple game is really good, not sure what it has in 
the way of tutorials. It's really nicely done in all respects. 
Chessmaster is pretty decent too, not sure if it runs on a Mac though.

You can probably find a book or two on it in the library as well. When 
I was little I got the book "The Kids Book of Chess" which is a good 
reference for all ages (not just kids--my dad was always reading it too 
and he pretty much learned from it). If you can find a copy of it 
somewhere it is probably the best one out there.

And if you ever come across an old Mac, get Battle Chess. The pieces 
actually fight when someone is captured! The animation is wonderful, 
and the color version on CD-ROM had tutorials (the color one seemed to 
be bundled with a lot of Performas in the mid 90s).

Scott


On Tuesday, March 14, 2006, at 06:53 PM, Jim Corsale wrote:

> Are there any Chess aficionados out there on the listserv?  If so,
> what Chess software will best suit a beginner who wants to learn from
> a great machine (iMac) c/ good Chess software onboard?
>
> (just start with the Apple Chess game?)
>
> Jim
> yes, i never learned to play Chess.
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From jamescorsale at mac.com  Tue Mar 14 16:53:59 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Tue, 14 Mar 2006 18:53:59 -0500
Subject: [NPMUG] chess?
Message-ID: <6914929A-0C13-499E-B11F-EE07507EF30E@mac.com>

Are there any Chess aficionados out there on the listserv?  If so,
what Chess software will best suit a beginner who wants to learn from
a great machine (iMac) c/ good Chess software onboard?

(just start with the Apple Chess game?)

Jim
yes, i never learned to play Chess.

From dave at davesevick.com  Wed Mar 15 14:04:06 2006
From: dave at davesevick.com (Dave Sevick)
Date: Wed, 15 Mar 2006 16:04:06 -0500
Subject: [NPMUG] Costco carrying Apple
Message-ID: <BA1EB10F-12BC-4505-BA03-C0371AD83E17@davesevick.com>

One of the local Costcos has the Mac mini (G4) 1.42GHz (512MB, 80GB,  
SuperDrive) with Bluetooth and AirPort Extreme, including an Apple  
Wireless Keyboard and Wireless Mouse and AppleCare for $699.99.

Bruce

--
Bruce Gerson                                    (818) 994-8686
BSG Solutions                                   iChat/AIM:  bgerson
Certified Member, Apple Consultants Network
LA, California

From fozard at nauticom.net  Wed Mar 15 20:02:17 2006
From: fozard at nauticom.net (Fozard)
Date: Wed, 15 Mar 2006 22:02:17 -0500
Subject: [NPMUG] [Fwd: Apple User Group Bulletin - March 15, 2006]
Message-ID: <4418D539.9090500@nauticom.net>



-------- Original Message --------
Subject: 	Apple User Group Bulletin - March 15, 2006
Date: 	Wed, 15 Mar 2006 15:15:16 -0800
From: 	Apple User Group Relations <usergroups at apple.com>
To: 	augb at lists.apple.com



Apple User Group Bulletin - March 15, 2006
.....................................................................

Dear User Group Leader,

Are you wondering what other groups are doing? Have you been looking for
ideas for meetings or events? Apple's User Group News and Events page
offers a look at group activities. Why not add your information too?

http://www.apple.com/usergroups/news/calendar/

Best wishes,
The Apple User Group Advisory Board
_____________________________________________________________________
______________________

COMMUNITY NEWS - MEMBERS
_____________________________________________________________________

1] - Starting Small: Making a Big Difference
.......................

A short while ago, Pam Borys of MacWoburn put out a call to the user
group community: Help user group members affected by hurricane Katrina.

>From there her project grew. With Dave Sevick of the Pittsburgh Apple
User Groups and the South Mississippi Mac User Group, the results have
been wonderful. Dave has arranged for the refurbishment and donation of
over 100 fairly recent computers. Terry Pollard gets the word out and
Cooper Monroe helps coordinate shipments.

See what can happen when groups work together.
http://tinyurl.com/jm7mz

These groups are the definition of community.
http://macwoburn.org/
http://web.mac.com/pittsburghgroups/
http://www.sm-mug.org/


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060315/4d7093b6/attachment.htm 

From fozard at nauticom.net  Thu Mar 16 08:53:43 2006
From: fozard at nauticom.net (Fozard)
Date: Thu, 16 Mar 2006 10:53:43 -0500
Subject: [NPMUG] Mac-boots-Windows contest won | Reg Hardware
Message-ID: <44198A07.9040501@nauticom.net>


http://www.reghardware.co.uk/2006/03/16/mac_boots_xp_contest_won/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060316/3e2bb017/attachment-0001.htm 

From mattbocchi at gmail.com  Thu Mar 16 13:08:33 2006
From: mattbocchi at gmail.com (Matt Bocchi)
Date: Thu, 16 Mar 2006 15:08:33 -0500
Subject: [NPMUG] Adobe InDesign
Message-ID: <fd240ab30603161208l6d6f693dj799fbb6e53d1324b@mail.gmail.com>

At our school yearbook we use Adobe InDesign for page layout.  It will
let us edit text in the boxes under peoples picture on all of the
page, except for the last row. We can't select anything and double
clicking doesn't work.  The staffer who made the page claims no wrong
doing and said it worked before :-P Who knows?!

Thanks in advance,
Matt Bocch
"Tech Admin"

From jamescorsale at mac.com  Sun Mar 19 14:40:34 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Sun, 19 Mar 2006 16:40:34 -0500
Subject: [NPMUG] cursor fly
Message-ID: <9BC0E533-E4A3-4A3C-B993-FC8A0B95D63E@mac.com>

A,

What causes cursor fly, where your cursor flies across the screen  
without warning.
I'm using a Mighty Mouse.

Jim

From jamescorsale at mac.com  Tue Mar 21 15:45:21 2006
From: jamescorsale at mac.com (Jim Corsale)
Date: Tue, 21 Mar 2006 17:45:21 -0500
Subject: [NPMUG] streaming .rm without realplayer
Message-ID: <1C015535-CE70-426A-B5B7-9F9E51B7B473@mac.com>

is it possible to stream real audio without realplayer?
Jim

From charles at firthconsulting.com  Wed Mar 22 05:50:52 2006
From: charles at firthconsulting.com (Charles Firth)
Date: Wed, 22 Mar 2006 07:50:52 -0500
Subject: [NPMUG] MS Vista delayed... again.
Message-ID: <3C2071B4-6BA2-4703-A449-02C3260881DD@firthconsulting.com>

An article talking about the new delay of Vista (OEMs will not get it  
until Jan 2007) and doing a nice recap of all the previous delays...  
remember, Vista (ne? Longhorn) was originally due out in 2003.

http://www.theregister.co.uk/2006/03/22/microsoft_vista_delayed/

From dave at davesevick.com  Wed Mar 22 06:10:55 2006
From: dave at davesevick.com (Dave Sevick)
Date: Wed, 22 Mar 2006 08:10:55 -0500
Subject: [NPMUG] MS Vista delayed... again.
In-Reply-To: <3C2071B4-6BA2-4703-A449-02C3260881DD@firthconsulting.com>
References: <3C2071B4-6BA2-4703-A449-02C3260881DD@firthconsulting.com>
Message-ID: <F8961962-6990-4FBF-B631-262EDA78DCDF@davesevick.com>

:-)

The more they trip on their own feet .. the better I feel ...

I'm reminded of a trip I took to Cupertino in Oct 2003.

At Apple headquarters the team that built OSXServer 10.3 Panther was  
seated at a very cool panel of about seven Apple guys,  in the posh  
Apple cafeteria for a sort of "Town Hall" meeting with the 1000+  
ACN's for the very first "Tech Camp".

The head of development of OSXS was asked by an Apple Consultant  
to    "please  compare the "Longhorn" software to the newly released  
"Panther" ....

He paused briefly ... smiled ... leaned forward into the  
microphone ... and said ... we actually ship our software, that's the  
difference ...

Which of course led to a loud roar of laughter and applause ....

And here we are now .... four years later ..... I repeat ....  FOUR  
YEARS later and they still have not shipped longhorn/vista/"place  
next name here" ....

Dave


On Mar 22, 2006, at 7:50 AM, Charles Firth wrote:

> An article talking about the new delay of Vista (OEMs will not get it
> until Jan 2007) and doing a nice recap of all the previous delays...
> remember, Vista (ne? Longhorn) was originally due out in 2003.
>
> http://www.theregister.co.uk/2006/03/22/microsoft_vista_delayed/
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From carendt at earthlink.net  Wed Mar 22 07:36:10 2006
From: carendt at earthlink.net (Carl Arendt)
Date: Wed, 22 Mar 2006 09:36:10 -0500
Subject: [NPMUG] Mac OS market data needed
Message-ID: <p06230902c04710286a4e@[192.168.0.2]>

I received the following request from a friend who heads a small company
that has hitherto been a Windows-only software house. He's decided to
develop Mac versions of his software, and is asking for some market
information. Can anyone supply data in response to his questions? I'll pass
along the consensus opinion!

Here's his request:

"We are in the process of developing Mac versions of our products.  There
are some bitmap functions we would like to use, but they are available only
on OS X 10.4 and later.  Is it reasonable to expect Mac users to have or
upgrade to this version?  What portion of the market would we be cutting
out if we required 10.4?  For that matter, what about OS X?  We are
certainly going to require that."

Anybody got some solid information on the current state of the Mac OS market?

Carl Arendt
Pittsburgh

From markd at borkware.com  Wed Mar 22 07:51:19 2006
From: markd at borkware.com (Mark Dalrymple)
Date: Wed, 22 Mar 2006 09:51:19 -0500
Subject: [NPMUG] Mac OS market data needed
In-Reply-To: <p06230902c04710286a4e@[192.168.0.2]>
References: <p06230902c04710286a4e@[192.168.0.2]>
Message-ID: <CED9C8BA-C43F-496C-9EF8-84C4ABB53A2A@borkware.com>

The OmniGroup (makers of OmniOutliner, OmniGraffle, and other good  
things) has a voluntary program where their users can phone-home  
machine configuration data:

http://update.omnigroup.com/

Note this isn't necessarily indicative of the entire market, since  
the OmniGroup's customer base is geekier than others, but interesting  
nonetheless.

Cheers,
++md



On Mar 22, 2006, at 9:36 AM, Carl Arendt wrote:

> I received the following request from a friend who heads a small  
> company
> that has hitherto been a Windows-only software house. He's decided to
> develop Mac versions of his software, and is asking for some market
> information. Can anyone supply data in response to his questions?  
> I'll pass
> along the consensus opinion!
>
> Here's his request:
>
> "We are in the process of developing Mac versions of our products.   
> There
> are some bitmap functions we would like to use, but they are  
> available only
> on OS X 10.4 and later.  Is it reasonable to expect Mac users to  
> have or
> upgrade to this version?  What portion of the market would we be  
> cutting
> out if we required 10.4?  For that matter, what about OS X?  We are
> certainly going to require that."
>
> Anybody got some solid information on the current state of the Mac  
> OS market?
>
> Carl Arendt
> Pittsburgh
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug
>


From jeff at szuhay.org  Wed Mar 22 09:52:11 2006
From: jeff at szuhay.org (Jeff Szuhay)
Date: Wed, 22 Mar 2006 11:52:11 -0500
Subject: [NPMUG] Mac OS market data needed
In-Reply-To: <p06230902c04710286a4e@[192.168.0.2]>
References: <p06230902c04710286a4e@[192.168.0.2]>
Message-ID: <57E557DE-9B97-4108-9809-73573823E2FE@szuhay.org>


On Mar 22, 2006, at 9:36 AM, Carl Arendt wrote:

> "We are in the process of developing Mac versions of our products.   
> There
> are some bitmap functions we would like to use, but they are  
> available only
> on OS X 10.4 and later.  Is it reasonable to expect Mac users to  
> have or
> upgrade to this version?  What portion of the market would we be  
> cutting
> out if we required 10.4?  For that matter, what about OS X?  We are
> certainly going to require that."

You haven't given enough information to accurately answer (assuming  
there is
an answer).

First, is this an add-on application? or one that its users might use  
for
significant portions of their day? Which is to say, how likely is the  
cost
of an OS upgrade to factor in the 'buy" decision.

I regularly use several applications which require the latest (or later)
version of the OS. BBEdit immediately comes to mind. Here, its  
functionality
is compelling enough that if an upgrade of it requires an OS version,  
I'd
do both at the same time. For a little widget or an app which I  
rarely use,
I would probably not consider it until after I've upgraded.

Second, from Apple's perspective, they have said to developers that  
OS X, 10.4,
is what Apple considers the "base" OS X version in terms of features,  
completeness
of APIs, completeness of compatibility, etc. And they have put enough  
into it,
that I believe this is so. Sure, there's more to do, but with 10.4,  
OS X has
"arrived."

Third, from the consumer's perspective, upgrading OS X is nothing  
like going
through a Windows upgrade. The cost is less ($129), the act is  
easier, and the
impact upon the user's daily life is minimal. New features are added  
to OS
upgrades, not changed to the point where _every_ application needs an  
update
(ok, there's the PPC an Intel thing, but for anyone who has 10.2 or  
10.3,
upgrading to Tiger is easier than falling off a log).

Last June, at WWDC, Steve Jobs reported the following numbers:
   16% of Mac users are using Tiger,
   49% are using Panther,
   25% Jaguar,
   and the rest (10%) are still running System 7.0 on their Performas.
   Goal is 50% on Tiger next year.
At that point Tiger had been out only about 2 months. Two. I believe  
the Omnigroup
numbers on the link given by Mark are indicative of current adoption.  
We'll probably
not get OS X share numbers from Apple again until WWDC in August this  
year.

For everyone who I have encouraged since to upgrade from anything  
prior to Tiger
to Tiger, they have thanked me for helping them make the change.  
Tiger is, in fact,
that much better.

Lastly, Tiger has been shipping for how long now? It's not as if he  
will be
relying upon as yet unshipped features. Tiger is a valuable and  
worthwhile upgrade.

Jeff

--
    Give a man a fire, and he will stay warm for a day.
    Set a man on fire, he stays warm for the rest of his life




From jeff at szuhay.org  Wed Mar 22 10:19:40 2006
From: jeff at szuhay.org (Jeff Szuhay)
Date: Wed, 22 Mar 2006 12:19:40 -0500
Subject: [NPMUG] Tiger adoption: another perspective
Message-ID: <BBFF5018-AE16-47AF-975B-E57D8EE56AE0@szuhay.org>

Tiger adoption, as widely speculated, has been enormous.

One indicator can be found on Amazon's site, at <http:// 
www.amazon.com/exec/obidos/ASIN/B0000E6NK9/002-4187017-2187250>
where over 1/2 of the visitors who _look_ at OS X 10.3 product page  
_buy_ OS X 10.4.

Now, there will be sites and institutions who may not have yet  
upgraded, but from any reasonable perspective, this is only a matter  
of time when they do. Are they in the target market?

From jillianfinn at mac.com  Wed Mar 22 12:32:48 2006
From: jillianfinn at mac.com (Jill McGlothlin)
Date: Wed, 22 Mar 2006 14:32:48 -0500
Subject: [NPMUG] Tiger adoption: another perspective
Message-ID: <295ce3827f877cba4c84515264916e2a@mac.com>

Jeff Szuhay wrote:
Now, there will be sites and institutions who may not have yet
upgraded, but from any reasonable perspective, this is only a matter
of time when they do. Are they in the target market?

Jeff,
I'd like to add that many business and individuals wait to upgrade 
their operating system until their required software offers a version 
written specifically for the new OS.  For example, many graphic and 
printing companies wait to upgrade an operating system until Quark and 
Adobe Creative Suite is guaranteed to run on it.

Jill McGlothlin


From elwin15208 at yahoo.com  Wed Mar 22 20:19:49 2006
From: elwin15208 at yahoo.com (Elwin Green)
Date: Wed, 22 Mar 2006 19:19:49 -0800 (PST)
Subject: [NPMUG] How to share a printer?
Message-ID: <20060323031949.24868.qmail@web84111.mail.dcn.yahoo.com>

I have a mac mini, purchased last April, with OS X
10.3.9. I want to connect my printer to it and share
that printer with other machines on my home network -
as of now, that means two with Windows 98SE and one
with Windows ME.

I've accomplished the first part - connecting the
printer, a Samsung ML-1750, so that it works. Can
anyone tell me how to share the printer with my other
computers? Thanks!

Elwin G.  

"What if THERE IS ENOUGH???"

From anomie at zbzoom.net  Wed Mar 22 21:04:56 2006
From: anomie at zbzoom.net (Anomie)
Date: Wed, 22 Mar 2006 23:04:56 -0500
Subject: [NPMUG] iPod battery?
Message-ID: <7db5fcfa5657ac3fe18be7f3a7b31722@zbzoom.net>

I bought a used iPod photo 60Gig. The battery at full charge only lasts 
4 or 5 hours of play using the iTrip.  Does it use more battery power 
to transmit with the iTrip? What does one need to to if one needs a new 
battery?  How long will the battery last if I am recording lectures 
without it being plugged in?

thanks all for any answers you have for me.

Mary Jo


From calliex at mac.com  Thu Mar 23 10:55:37 2006
From: calliex at mac.com (Joe Condle)
Date: Thu, 23 Mar 2006 12:55:37 -0500
Subject: [NPMUG] iPod battery?
In-Reply-To: <7db5fcfa5657ac3fe18be7f3a7b31722@zbzoom.net>
References: <7db5fcfa5657ac3fe18be7f3a7b31722@zbzoom.net>
Message-ID: <F3FE0508-2BD6-47BC-B34C-C68F78F588F4@mac.com>

First the iPod should be under warranty take it to the Apple Store  
for a battery test.  The iTrip does pull power from the iPod.  I am  
not sure how much.  I would suggest an FM transmitter that transmits  
and charges at the same time.
On Mar 22, 2006, at 11:04 PM, Anomie wrote:

> I bought a used iPod photo 60Gig. The battery at full charge only  
> lasts
> 4 or 5 hours of play using the iTrip.  Does it use more battery power
> to transmit with the iTrip?
The iTrip does pull power from the iPod.  I am not sure how much.  I  
would suggest an FM transmitter that transmits and charges at the  
same time.

> What does one need to to if one needs a new
> battery?
A new battery is about $100.  Yours is still under warranty, take it  
to the Apple Store for a battery test.  It is covered under the one  
year warranty.  They will replace the iPod for certain hardware  
failures.  If who ever you bought it from purchased the the extended  
plan it is transferable to you. You can still buy the plan yourself  
to extend the plan for another year.

> How long will the battery last if I am recording lectures
> without it being plugged in?
I am not sure.  Check with the manufactures of the recording  
devices.  Some devices pull power from the iPod.


Joe


From Barbara.Mitchell28 at verizon.net  Thu Mar 23 11:48:39 2006
From: Barbara.Mitchell28 at verizon.net (Barbara Mitchell)
Date: Thu, 23 Mar 2006 13:48:39 -0500
Subject: [NPMUG] ipod battery
Message-ID: <B43DE922-5F1B-4EA2-8389-3FB478D39244@verizon.net>

Podcasts pull battery life also.

From jfroman at mac.com  Thu Mar 23 12:50:42 2006
From: jfroman at mac.com (Jim Froehlich)
Date: Thu, 23 Mar 2006 14:50:42 -0500
Subject: [NPMUG] iPod battery?
In-Reply-To: <F3FE0508-2BD6-47BC-B34C-C68F78F588F4@mac.com>
References: <7db5fcfa5657ac3fe18be7f3a7b31722@zbzoom.net>
	<F3FE0508-2BD6-47BC-B34C-C68F78F588F4@mac.com>
Message-ID: <F7DBCD4A-9BDD-44DB-A4AE-7C791BB04548@mac.com>

Before taking an iPod to the Apple Store for testing, please follow  
the steps in this knowledge base article:

http://docs.info.apple.com/article.html?artnum=61475

It could save you a trip.

Jim

On Mar 23, 2006, at 12:55 PM, Joe Condle wrote:

> First the iPod should be under warranty take it to the Apple Store
> for a battery test.  The iTrip does pull power from the iPod.  I am
> not sure how much.  I would suggest an FM transmitter that transmits
> and charges at the same time.
> On Mar 22, 2006, at 11:04 PM, Anomie wrote:
>
>> I bought a used iPod photo 60Gig. The battery at full charge only
>> lasts
>> 4 or 5 hours of play using the iTrip.  Does it use more battery power
>> to transmit with the iTrip?
> The iTrip does pull power from the iPod.  I am not sure how much.  I
> would suggest an FM transmitter that transmits and charges at the
> same time.
>
>> What does one need to to if one needs a new
>> battery?
> A new battery is about $100.  Yours is still under warranty, take it
> to the Apple Store for a battery test.  It is covered under the one
> year warranty.  They will replace the iPod for certain hardware
> failures.  If who ever you bought it from purchased the the extended
> plan it is transferable to you. You can still buy the plan yourself
> to extend the plan for another year.
>
>> How long will the battery last if I am recording lectures
>> without it being plugged in?
> I am not sure.  Check with the manufactures of the recording
> devices.  Some devices pull power from the iPod.
>
>
> Joe
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug


From carendt at earthlink.net  Thu Mar 23 13:59:38 2006
From: carendt at earthlink.net (Carl Arendt)
Date: Thu, 23 Mar 2006 15:59:38 -0500
Subject: [NPMUG] Mac OS market data needed
In-Reply-To: <p06230902c04710286a4e@[192.168.0.2]>
References: <p06230902c04710286a4e@[192.168.0.2]>
Message-ID: <p06230901c048bbb0ac41@[192.168.0.2]>

Many thanks to all who posted information about the market shares of
various flavors of MacOS X. I have passed along your comments and
suggestions, all of which are deeply appreciated!

Thanks again!
Carl Arendt
Pittsburgh



At 9:36 AM -0500 3/22/06, Carl Arendt wrote:

      I received the following request from a friend who heads a small company
      that has hitherto been a Windows-only software house...

      "We are in the process of developing Mac versions of our products.  There
      are some bitmap functions we would like to use, but they are
      available only
      on OS X 10.4 and later.  Is it reasonable to expect Mac users to have or
      upgrade to this version?  What portion of the market would we be cutting
      out if we required 10.4?  For that matter, what about OS X?  We are
      certainly going to require that."



From ruppertm at bellatlantic.net  Fri Mar 24 08:48:51 2006
From: ruppertm at bellatlantic.net (Mark Ruppert)
Date: Fri, 24 Mar 2006 10:48:51 -0500
Subject: [NPMUG] dmg litter.  From Ruppert
Message-ID: <442414E3.8030901@bellatlantic.net>

Hi, all,
    Applications are like my kids!  Most times after I install an 
application, it leaves its stuff laying around (on the desktop.)    
Where does this dmg litter rightly go after the installation??.  I'll 
drag it there.

    Mark Ruppert
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060324/a0989380/attachment-0001.htm 

From ruppertm at bellatlantic.net  Fri Mar 24 08:56:06 2006
From: ruppertm at bellatlantic.net (Mark Ruppert)
Date: Fri, 24 Mar 2006 10:56:06 -0500
Subject: [NPMUG] Appleworks as default??   From Ruppert
Message-ID: <44241696.8010601@bellatlantic.net>

    I recently added Office for Mac on my work computer.  Now, after I 
start up,  if I double click on a document on the desktop (even one that 
I created in Appleworks) the computer tries to open it with Word.  It 
feels like Word is bullying me. 
    Can I select Appleworks as my default word processing application 
somewhere??

    Mark Ruppert
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060324/17a45fb3/attachment-0001.htm 

From fozard at nauticom.net  Fri Mar 24 17:38:12 2006
From: fozard at nauticom.net (Fozard)
Date: Fri, 24 Mar 2006 19:38:12 -0500
Subject: [NPMUG] Five years of Mac OS X : Page 1
Message-ID: <442490F4.7090401@nauticom.net>


http://arstechnica.com/reviews/os/osx-fiveyears.ars/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060324/dd6683d5/attachment-0001.htm 

From anomie at zbzoom.net  Mon Mar 27 09:14:20 2006
From: anomie at zbzoom.net (Anomie)
Date: Mon, 27 Mar 2006 11:14:20 -0500
Subject: [NPMUG] mac mail ?
Message-ID: <9973d85064b3bc6197c151ca9cd85863@zbzoom.net>

I have been using mac mail for years. After a lot of fooling around 
with the double negatives of the settings for junk, I finally had it 
set well, so that almost everything that went to the junk box was junk. 
Other than the occasional mail sent by someone that was not in my 
address book.

In the last week or 2 I have started getting all kinds of spam in my 
in-box. none of these addresses are in my address book, yet they area 
getting through. My efforts at changing the settings have only made it 
worse.  Is anyone else having this problem? I use Armstrong cable. 
Since Dave gave us the card that tells us how to capture a screen... 
here ya go if it helps.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Picture 1.pdf
Type: application/pdf
Size: 91566 bytes
Desc: not available
Url : http://davesevick.com/pipermail/npmug/attachments/20060327/523dd899/attachment-0001.pdf 

From dave at davesevick.com  Tue Mar 28 21:24:47 2006
From: dave at davesevick.com (Dave Sevick)
Date: Tue, 28 Mar 2006 23:24:47 -0500
Subject: [NPMUG] Saturday April 1, 2006 to be a Center for Hope workday ....
Message-ID: <21EA9388-66DF-44D6-A818-A117C575FEF9@davesevick.com>

Anyone want to join us to help box computers headed for the Gulf ?

We could use as much help as possible.

Please let me know so we an coordinate tasks.

Dave



===========================================
The Center for Hope - Ambridge, PA
Computer Donation and Training Program
Co-Directors - Dave Sevick and Bob Donaldson
dave at davesevick.com - 724-272-2580
radonaldson at mac.com - 412-922-3303
-----
Computer trainer team voicemail - 724-266-4975
Training coordinators - Sarah Brim and Barb Hamill
sarahbrim2 at mac.com, bsh5350 at comcast.net
-----
http://www.thecenterforhope.com
===========================================





From anomie at zbzoom.net  Wed Mar 29 09:48:41 2006
From: anomie at zbzoom.net (Anomie)
Date: Wed, 29 Mar 2006 11:48:41 -0500
Subject: [NPMUG] test
Message-ID: <e86f1113bc7bd333afaa302cf04b6a7f@zbzoom.net>

You can ignore this, I just need to see if I am getting posts, with 
this mail problem, I have not gotten any posts from the group. No need 
to reply.

MJ


From dave at davesevick.com  Wed Mar 29 16:12:11 2006
From: dave at davesevick.com (Dave Sevick)
Date: Wed, 29 Mar 2006 18:12:11 -0500
Subject: [NPMUG] Apple Internship awarded to Penn State student
Message-ID: <B68C96AD-F4AE-45BA-9C4D-C888E24BEB3E@davesevick.com>

Apple Internship awarded to Penn State student

David Cairns, a junior Computer Science major at Penn State's main  
campus in University Park, PA, will be spending his summer at Apple's  
Cupertino campus working as a student intern with the Open GL  
Performance Group.

David has been writing programs for Mac computers since he was a  
student at North Penn High School in Lansdale, PA. As a student work- 
study researcher with the Computer Vision Group at Penn State, he is  
currently developing a computer vision system that utilizes a  
synthetic environment for real-time 3D simulation. This program  
utilizes a Mac computer and iSight camera, and is being created from  
the ground up as a universal binary application. He has previously  
written two other applications for Mac OS X, ?iCart?, an application  
developed in Objective-C/Cocoa and C++ that allows the user to  
sequence multimedia files and stream them over an FireWire  
connection, allowing for seamless integration of digital media into a  
television production pipeline, and ?QTcat?, an Objective-C/Cocoa  
application for splicing multimedia files together.

David's previous accomplishments include an internship at the IBM  
Systems and Technology Group in Poughkeepsie, NY, where he was a Co- 
op Pre Professional Programmer from January-August 2005. David also  
attended the Worldwide Developer's Conference in June 2005 after  
being awarded a student scholarship by Apple. In October 2004 he  
worked as a Student Volunteer at the SuperComputing Conference in  
Pittsburgh. David has competed twice at the annual ACM Programming  
Competition with the Penn State Programming Team. He is also an  
active member of the Penn State Mac Users Group.

David is the son of Judy and Jim Habel, owners of MacOutfitters in  
Cranberry Twp., PA and Doylestown, PA. www.macoutfitters.com


-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060329/78dcd554/attachment.htm 

From dave at davesevick.com  Thu Mar 30 08:47:00 2006
From: dave at davesevick.com (Dave Sevick)
Date: Thu, 30 Mar 2006 10:47:00 -0500
Subject: [NPMUG] Apple Internship awarded to Penn State student
Message-ID: <122B4F6B-AE49-4CCD-94FF-D74B50D8B319@davesevick.com>

Apple Internship awarded to Penn State student

David Cairns, a junior Computer Science major at Penn State's main  
campus in University Park, PA, will be spending his summer at Apple's  
Cupertino campus working as a student intern with the Open GL  
Performance Group.

David has been writing programs for Mac computers since he was a  
student at North Penn High School in Lansdale, PA. As a student work- 
study researcher with the Computer Vision Group at Penn State, he is  
currently developing a computer vision system that utilizes a  
synthetic environment for real-time 3D simulation. This program  
utilizes a Mac computer and iSight camera, and is being created from  
the ground up as a universal binary application. He has previously  
written two other applications for Mac OS X, ?iCart?, an application  
developed in Objective-C/Cocoa and C++ that allows the user to  
sequence multimedia files and stream them over an FireWire  
connection, allowing for seamless integration of digital media into a  
television production pipeline, and ?QTcat?, an Objective-C/Cocoa  
application for splicing multimedia files together.

David's previous accomplishments include an internship at the IBM  
Systems and Technology Group in Poughkeepsie, NY, where he was a Co- 
op Pre Professional Programmer from January-August 2005. David also  
attended the Worldwide Developer's Conference in June 2005 after  
being awarded a student scholarship by Apple. In October 2004 he  
worked as a Student Volunteer at the SuperComputing Conference in  
Pittsburgh. David has competed twice at the annual ACM Programming  
Competition with the Penn State Programming Team. He is also an  
active member of the Penn State Mac Users Group.

David is the son of Judy and Jim Habel, owners of MacOutfitters in  
Cranberry Twp., PA and Doylestown, PA. www.macoutfitters.com



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://davesevick.com/pipermail/npmug/attachments/20060330/2a2bbad0/attachment.htm 

From patrick at patrickcranston.com  Thu Mar 30 16:01:49 2006
From: patrick at patrickcranston.com (Patrick Cranston)
Date: Thu, 30 Mar 2006 18:01:49 -0500
Subject: [NPMUG] Test - Do Not Reply
Message-ID: <FB068B6A-46BE-44CD-824B-AEDA48C57C4D@patrickcranston.com>

Test Message - Please do not reply.

Patrick Cranston
Cranston Consulting & Media
(412) 303-0971
www.patrickcranston.com
patrick at patrickcranston.com




From charlesfirth at comcast.net  Mon Mar 27 11:46:50 2006
From: charlesfirth at comcast.net (Charles Firth)
Date: Mon, 27 Mar 2006 13:46:50 -0500
Subject: [NPMUG] New IE flaw is trashing Windows users & websites
Message-ID: <0A95386A-D087-4766-887B-2C4A11EC6081@comcast.net>

Sounds pretty bad out there...
Another friendly reminder to use Firefox or (heh) a Mac.

This includes people with fully patched systems, and even with  
Symantec AV up-to-date.

http://blog.washingtonpost.com/securityfix/2006/03/ 
attacks_on_internet_explorer_f_1.html



From fstifel at verizon.net  Wed Mar 29 22:05:56 2006
From: fstifel at verizon.net (Flaccus M. B. Stifel)
Date: Thu, 30 Mar 2006 00:05:56 -0500
Subject: [NPMUG] USB to Serial Adaptor needed
Message-ID: <p06020405c0510cde2737@[192.168.0.100]>

Hi,

I have deserving friends who need a USB to Apple Serial mini-din 
printer adapter, Keyspan, Belkin or other.

Anyone have one no longer needed they would be willing to sell or donate?

Thanks,

Flacc

PA- Verizon Fios installed last week at my house. Used wireless 
router.  All works fine & very fast!
-- 
Flaccus M. B. Stifel
2979 Clearview Road
Allison Park, PA 15101-3157
(412)486-8067 V
(412)496-2716 F

From cuzinbruce at fastermac.net  Thu Mar 30 19:42:06 2006
From: cuzinbruce at fastermac.net (CuZinBruce)
Date: Thu, 30 Mar 2006 21:42:06 -0500
Subject: [NPMUG] New IE flaw is trashing Windows users & websites
In-Reply-To: <0A95386A-D087-4766-887B-2C4A11EC6081@comcast.net>
References: <0A95386A-D087-4766-887B-2C4A11EC6081@comcast.net>
Message-ID: <98D8FE11-FF12-4219-A3B7-FD5A19633801@fastermac.net>

I found an article concerning this flaw here:

  http://blog.washingtonpost.com/securityfix/2006/03/ 
attacks_on_internet_explorer_f_1.html


CuZinBruce


On Mar 27, 2006, at 1:46 PM, Charles Firth wrote:

> Sounds pretty bad out there...
> Another friendly reminder to use Firefox or (heh) a Mac.
>
> This includes people with fully patched systems, and even with
> Symantec AV up-to-date.
>
> http://blog.washingtonpost.com/securityfix/2006/03/
> attacks_on_internet_explorer_f_1.html
>
>
> _______________________________________________
> NPMUG mailing list
> NPMUG at davesevick.com
> http://davesevick.com/mailman/listinfo/npmug


From dave at davesevick.com  Fri Mar 31 14:56:31 2006
From: dave at davesevick.com (Dave Sevick)
Date: Fri, 31 Mar 2006 16:56:31 -0500
Subject: [NPMUG] Call to membership for hands on help tomorrow,
	Sat April 1 ....
Message-ID: <B991E5EE-4590-4A6E-82A5-0B52D3D78F75@davesevick.com>

Dear Apple folks,

Tomorrow is a very big day at the Center for Hope in Ambridge ... see  
more at   http://npmug.com

Here is what needs done:

-  About 50 computers labeled and boxed for shipment to the Katrina  
victims in the Gulf ....

-  About 200 PC monitors need tested, labeled and prepared for  
loading on a truck destined for our new partner "Hi-Tech Scrap" in  
Wilkinsburg.

This will take a bunch of people ...

Please email me TONIGHT if you want to help Bob Donaldson and me  
complete this project.

I'm delegating the jobs.

I can guarantee you will be just standing around   :-)

Dave

===========================================
The Center for Hope - Ambridge, PA
Computer Donation and Training Program
Co-Directors - Dave Sevick and Bob Donaldson
dave at davesevick.com - 724-272-2580
radonaldson at mac.com - 412-922-3303
-----
Computer trainer team voicemail - 724-266-4975
Training coordinators - Sarah Brim and Barb Hamill
sarahbrim2 at mac.com, bsh5350 at comcast.net
-----
http://www.thecenterforhope.com
===========================================